EUVD-2008-4420

Malware in sbrugna...

Remote file inclusion

PHP remote file inclusion vulnerability in admin/bin/patch.php in MartinWood Datafeed Studio before 1.6.3 allows remote attackers to execute arbitrary PHP code via a URL in the INSTALLFOLDER parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

CVE-2008-4439

CVE-2008-4439 affects MartinWood Datafeed Studio prior to 1.6.3, where PHP remote file inclusion is possible in admin/bin/patch.php via the INSTALL_FOLDER URL parameter, enabling remote execution of PHP code. Exploitation details are described in vendor references; one cited path notes a Datafeed...