CVE-2008-7152: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Specimen Image Database SID, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the dir parameter to 1 client.php or 2 taxonservice.php...

Specimen Image Database - taxonservice.php?dir Remote File Inclusion

Specimen Image Database - taxonservice.php?dir Remote File Inclusion source: https://www.securityfocus.com/bid/28142/info SID Specimen Image Database is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied input. Exploiting these issues may...