Description
myphpPagetool PHP script 0.4.3-1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the includedir variable.
References
- 20011002 results of semi-automatic source code audit mailing-list
- php-includedir-code-execution(7215) vdb-entry
- VU#847803 third-party-advisory
- 3394 vdb-entry