CVE-2005-2412

CVE-2005-2412 describes a PHP remote file inclusion vulnerability in PHP FirstPost’s block.php triggered via the Include parameter, allowing an attacker to execute arbitrary PHP code. The issue is network-exposed with low exploit complexity and no authentication required, resulting in partial int...

CVE-2005-2412

PHP remote file inclusion vulnerability in block.php in PHP FirstPost allows remote attackers to execute arbitrary PHP code via the Include parameter...

CVE-2005-2412: Undefined Security Weakness

PHP remote file inclusion vulnerability in block.php in PHP FirstPost allows remote attackers to execute arbitrary PHP code via the Include parameter...

phpFirstPost.txt

Language: PHP Project name: PHP FirstPost Risk:High Home page: http://phpfirstpost.sourceforge.net Discovered by: GB Description: PHP FirstPost is yet another PHP weblog. This one, however, is based on Scoop, and has the open submission queue and comment rating system. A vulnerability exists in P...