Description
Phorecast PHP script before 0.40 allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
References
- 20011002 results of semi-automatic source code audit mailing-list
- php-includedir-code-execution(7215) vdb-entry
- http://phorecast.org/
- 3388 vdb-entry