CVE-2004-0068

PHP remote file inclusion vulnerability in config.php for PhpDig 1.6.5 and earlier allows remote attackers to execute arbitrary PHP code by modifying the $relativescriptpath parameter to reference a URL on a remote web server that contains the code...

PhpDig config.php relative_script_path Parameter Remote File Inclusion

The remote host is running phpdig, an http search engine written in PHP. There is a flaw in this product that could allow an attacker to execute arbitrary PHP code on this by forcing this set of CGI to include a PHP script hosted on a third-party host. %NASLMINLEVEL 70300 C Tenable Network...