AjaxPortal di.php File Inclusion (CVE-2009-2262)

A remote file inclusion vulnerability has been reported in AjaxPortal. The vulnerability is caused due to improper handling of crafted URL using the "pathtoserverdata" parameter. Successful exploitation will let the remote attacker to execute arbitrary PHP code...

CVE-2009-2262

AjaxPortal 3.0 is affected by a PHP remote file inclusion via install/di.php, exploitable through the pathtoserverdata parameter to execute arbitrary PHP code. The issue arises from improper handling of crafted URLs in the parameter, with the installation manual advising deletion of the install/ ...

AjaxPortal v3.0 Remote File Inclusion Vulnerability

/=============================================================================================================================================== | | o AjaxPortal v3.0 Remote File Inclusion Vulnerability | | Software : AjaxPortal v3.0 | Vendor :...