CVE-2002-0953

globals.php in PHP Address before 0.2f, with the PHP allowurlfopen and registerglobals variables enabled, allows remote attackers to execute arbitrary PHP code via a URL to the code in the LangCookie parameter...

CVE-2002-0953

The PHP Address application (versions before 0.2f ) is vulnerable to Remote File Inclusion (RFI) via the globals.php file. When the PHP allow_url_fopen and register_globals variables are enabled, remote attackers can execute arbitrary PHP code by passing a URL through the LangCookie parameter. Th...