Description
PHP remote file inclusion vulnerability in Actionpoll PHP script before 1.1.2 allows remote attackers to execute arbitrary PHP code via a URL in the includedir parameter.
References
- 20011002 results of semi-automatic source code audit mailing-list
- php-includedir-code-execution(7215) vdb-entry
- 1960 vdb-entry
- 3384 vdb-entry
- http://sourceforge.net/project/shownotes.php?release_id=58331