Description
Webodex PHP script 1.0 and earlier allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
References
- 20011002 results of semi-automatic source code audit mailing-list
- php-includedir-code-execution(7215) vdb-entry
- 3385 vdb-entry