Description
PHP remote file inclusion vulnerability in secure_img_render.php in e107 0.615 allows remote attackers to execute arbitrary PHP code by modifying the p parameter to reference a URL on a remote web server that contains the code.
References
- http://www.waraxe.us/index.php?modname=sa&id=31
- 10436 vdb-entry
- 11740 third-party-advisory
- 6530 vdb-entry
- e107-secure-img-render-file-include(16282) vdb-entry
- 20040529 [waraxe-2004-SA#031 - Multiple vulnerabilities in e107 version 0.615] mailing-list
- 20040529 [waraxe-2004-SA#031 - Multiple vulnerabilities in e107 version 0.615] mailing-list