Code injection

Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP code into oxyhistory.php via the oxymsg parameter...

CVE-2008-6651: Improper Control of Generation of Code

Static code injection vulnerability in edithistory.php in OxYProject OxYBox 0.85 allows remote attackers to inject arbitrary PHP code into oxyhistory.php via the oxymsg parameter...

OxYProject 0.85 - 'edithistory.php' Remote Code Execution

OxYProject 0.85 edithistory.php Remote Code Execution Vulnerability Script : http://puzzle.dl.sourceforge.net/sourceforge/oxyproject/OxYBox085uns.zip Code Vuln : Ln 24 include'oxycfg.php'; // // Editing the Chat History // $editfile = $file'ChatHistory'; $fh = fopen$editfile, 'a' or die"Error...