Remote file inclusion

PHP remote file inclusion vulnerability in index.php in Sphider 1.2.x allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter. NOTE: a third party disputes this vulnerability, stating that "the application is not vulnerable to this issue...

CVE-2007-2411

PHP remote file inclusion vulnerability in index.php in Sphider 1.2.x allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter. NOTE: a third party disputes this vulnerability, stating that "the application is not vulnerable to this issue...

CVE-2007-2411

Affected software: Sphider 1.2.x. Vulnerability: PHP remote file inclusion via index.php, using include_dir parameter to execute arbitrary PHP code. Root cause: remote inclusion in include_dir path. Impact: potential remote code execution with partial confidentiality/integrity/availability implic...