CVE-2008-0502

The CVE-2008-0502 entry documents a PHP remote file inclusion vulnerability in Connectix Boards (templates/Official/part_userprofile.php) affecting version 0.8.2 and earlier. The root cause is that the template_path parameter can be controlled to include an arbitrary URL, enabling remote attacker...