Remote file inclusion

2007-10-1821:17:00

PRIOn knowledge base

www.prio-n.com

7.8 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.3%

JSON

Multiple PHP remote file inclusion vulnerabilities in PHPBlog 0.1 Alpha allow remote attackers to execute arbitrary PHP code via a URL in the blog_localpath parameter to (1) includes/functions.php or (2) includes/email.php. NOTE: this issue is disputed by CVE because the identified code is in functions that are not accessible via direct request

CPENameOperatorVersion
phpblogeq0.1 alpha

CPE	Name	Operator	Version
	phpblog	eq	0.1 alpha

References

arfis.wordpress.com/2007/09/13/rfi-02-phpblog/

osvdb.org/39392