Description
Multiple PHP remote file inclusion vulnerabilities in Web Server Creator - Web Portal (WSC-WebPortal) 0.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) l parameter to customize.php or the (2) pg parameter to index.php.
References
- 1005712 vdb-entry
- webservercreator-customize-file-include(28815) vdb-entry
- 19896 vdb-entry
- http://www.frog-man.org/tutos/WSC-WebPortal.txt
- 2318 exploit
- webservercreator-php-file-include(10689) vdb-entry
- 6251 vdb-entry
- 20021125 Web Server Creator - Web Portal 0.1 (PHP) mailing-list