Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in RobotStats 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the DOCUMENTROOT parameter to 1 graph.php and 2 robotstats.inc.php. NOTE: the provenance of this information is unknown; the details are obtained solely from thir...

CVE-2008-6206

CVE-2008-6206 involves multiple PHP remote file inclusion vulnerabilities in RobotStats 0.1. The issue affects the scripts graph.php and robotstats.inc.php , where an attacker can supply a URL via the DOCUMENT_ROOT parameter to trigger remote code execution on the server. The vulnerability’s root...

RobotStats 0.1 - 'graph.php?DOCUMENT_ROOT' Remote File Inclusion

source: https://www.securityfocus.com/bid/28615/info RobotStats is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow an attacker to compromise the application and the underlying system; other attac...