CVE-2008-4502: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in DataFeedFile DFF PHP Framework API allow remote attackers to execute arbitrary PHP code via a URL in the DFFconfigdirinclude parameter to 1 DFFaffiliateclientAPI.php, 2 DFFfeaturedprdt.func.php, 3 DFFmer.func.php, 4 DFFmerprdt.func.php, 5...

DFF PHP Framework API - 'Data Feed File' Remote File Inclusion

DFF PHP Framework API Data Feed File Multiple Inclusion Vulnerabilities Script :http://opensource.datafeedfile.com/download/DFFPHPFrameworkAPI-latest.zip Exploits : /DFFPHPFrameworkAPI-latest/include/DFFaffiliateclientAPI.php?DFFconfigdirinclude=...