Description
PHP remote file inclusion vulnerability in index.php in GNUBoard 3.39 and earlier allows remote attackers to execute arbitrary PHP code by modifying the doc parameter to reference a URL on a remote web server that contains the code.
References
- 11948 vdb-entry
- 13479 third-party-advisory
- gnuboard-doc-index-file-include(18494) vdb-entry
- 20041215 STG Security Advisory: [SSA-20041214-14] GNUBoard PHP injection vulnerability mailing-list
- http://sir.co.kr/?doc=bbs/gnuboard.php&bo_table=pds&page=1&wr_id=1871