Description
PHP remote file inclusion vulnerability in authform.inc.php in PHProjekt 4.2.3 and earlier allows remote attackers to include arbitrary PHP code via a URL in the path_pre parameter.
References
- GLSA-200412-27 vendor-advisory
- 13660 third-party-advisory
- 12613 vdb-entry
- 12116 vdb-entry
- 1012708 vdb-entry
- http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=193
- phprojekt-pathpre-file-include(18683) vdb-entry