Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Philippe CROCHAT EasySite 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the EASYSITEBASE parameter to 1 browser.php, 2 imageeditor.php and 3 skinchooser.php in configuration/. NOTE: the provenance of this information is...

CVE-2008-6196

Multiple PHP remote file inclusion vulnerabilities affect Philippe CROCHAT EasySite 2.0, allowing an attacker to execute arbitrary PHP code via a URL parameter (EASYSITE_BASE) passed to configuration/. scripts browser.php, image_editor.php, and skin_chooser.php. Underlying issue: remote file incl...