Immunity Canvas: PHPSKELSITE_RFI

Name| phpskelsiterfi ---|--- CVE| CVE-2009-0595 Exploit Pack| CANVAS Description| PHPSkelSite Remote File Include Notes| CVSS: 5.1 Repeatability: Infinite VENDOR: Skelsite CVE Url: https://vulners.com/cve/CVE-2009-0595 CVE Name: CVE-2009-0595...

CVE-2009-0595

CVE-2009-0595 affects phpSkelSite 1.4: PHP remote file inclusion in skysilver/login.tpl.php when register_globals is enabled and magic_quotes_gpc is disabled. An attacker can cause arbitrary PHP code execution by supplying a URL in the theme parameter. Public references indicate existing exploit ...

CVE-2009-0595

PHP remote file inclusion vulnerability in skysilver/login.tpl.php in phpSkelSite 1.4, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the theme parameter...