Remote file inclusion

PHP remote file inclusion vulnerability in classifiedright.php in phpBazar 2.1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the languagedir parameter...

CVE-2006-2528

CVE-2006-2528 affects phpBazar 2.1.0 and earlier, where a vulnerability in classified_right.php allows remote attackers to execute arbitrary PHP code via a URL supplied to the language_dir parameter (PHP remote file inclusion). The issue is caused by insufficient validation of the language_dir in...