CVE-2008-1511

Multiple PHP remote file inclusion vulnerabilities in ooComments 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the PathToComment parameter for 1 classes/classadmin.php and 2 classes/classcomments.php. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-1511

The CVE-2008-1511 issue affects ooComments 1.0, where the PathToComment parameter in classes/class_admin.php and classes/class_comments.php allows remote attackers to cause arbitrary PHP code execution by supplying a URL (remote file inclusion). The vulnerability is triggered via the affected API...