CVE-2007-1924: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in phpContact allow remote attackers to execute arbitrary PHP code via a URL in the includepath parameter to 1 contactbusiness.php or 2 contactperson.php. NOTE: this issue is disputed by CVE and a reliable third party, because includepath is...

phpcontact-rfi.txt

/ phpContact Multiple Remote File Inclusion Vulnerabilities / //Author: Arham Muhammad //Vulnerable Files: /contactbusiness.php, /contactperson.php //Source: http://codewand.org/download/phpContact.zip //Vulnerable Code: include$includepath . "includesession.inc.php"; //Expl0it:...