CVE-2009-3492

Loggix Project up to version 9.4.5 is affected by Multiple PHP remote file inclusion vulnerabilities . An attacker can provide a URL in the pathToIndex parameter to (1) Calendar.php, (2) Comment.php, (3) Rss.php, (4) Trackback.php in lib/Loggix/Module/, and (5) modules/downloads/lib/LM_Downloads....

CVE-2009-3492: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Loggix Project 9.4.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathToIndex parameter to 1 Calendar.php, 2 Comment.php, 3 Rss.php and 4 Trackback.php in lib/Loggix/Module/; and 5...