CVE-2008-4439

CVE-2008-4439 affects MartinWood Datafeed Studio prior to 1.6.3, where PHP remote file inclusion is possible in admin/bin/patch.php via the INSTALL_FOLDER URL parameter, enabling remote execution of PHP code. Exploitation details are described in vendor references; one cited path notes a Datafeed...

CVE-2008-4439: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in admin/bin/patch.php in MartinWood Datafeed Studio before 1.6.3 allows remote attackers to execute arbitrary PHP code via a URL in the INSTALLFOLDER parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third...

Datafeed Studio - 'patch.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/30659/info Datafeed Studio is prone to a remote file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this issue to include an arbitrary remote file containing malicious PHP code and execute it in th...