CVE-2008-1511

Multiple PHP remote file inclusion vulnerabilities in ooComments 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the PathToComment parameter for 1 classes/classadmin.php and 2 classes/classcomments.php. NOTE: the provenance of this information is unknown; the details are...

CVE-2008-1511

The ooComments 1.0 software is susceptible to multiple PHP remote file inclusion vulnerabilities. These flaws stem from insufficient sanitization of user-supplied data, specifically via the PathToComment parameter. A remote attacker can exploit this by providing a URL to execute arbitrary PHP cod...