Immunity Canvas: MINDMELD_INCLUDE

Name| mindmeldinclude ---|--- CVE| CVE-2008-0572 Exploit Pack| CANVAS Description| Mindmeld remote file include Notes| CVE Name: CVE-2008-0572 VENDOR: Mindmeld Repeatability: Infinite References: http://www.securityfocus.com/bid/27538 CVE Url: https://vulners.com/cve/CVE-2008-0572 CVSS: 6.8...

CVE-2008-0572

CVE-2008-0572 affects Mindmeld 1.2.0.10 via multiple PHP remote file inclusion vulnerabilities. The issue arises in the MM_GLOBALS[home] parameter used to include files in include/ (acweb/admin_index.php; ask.inc.php; learn.inc.php; manage.inc.php; mind.inc.php; sensory.inc.php). This allows an a...