CVE-2010-0367

CVE-2010-0367 describes multiple PHP remote file inclusion vulnerabilities in BitScripts Bits Video Script 2.05 Gold Beta (and possibly 2.04). The issue is exploitable via a crafted URL that injects a value into the rowptem[template] parameter sent to showcasesearch.php and showcase2search.php, a...

CVE-2010-0367: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in BitScripts Bits Video Script 2.05 Gold Beta, and possibly 2.04, allow remote attackers to execute arbitrary PHP code via a URL in the rowptemtemplate parameter to 1 showcasesearch.php and 2 showcase2search.php...