CVE-2008-5334

PHP remote file inclusion vulnerability in includes/common.php in NitroTech 0.0.3a allows remote attackers to execute arbitrary PHP code via a URL in the root parameter...

CVE-2008-5334

CVE-2008-5334 affects NitroTech 0.0.3a. The vulnerability is a PHP remote file inclusion in includes/common.php that allows an attacker to execute arbitrary PHP code by supplying a URL in the root parameter. This is caused by improper handling of user-controlled input used to include files. Docum...