Description
global.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the BASE_DIR parameter.
References
- 17116 vdb-entry
- 15600 third-party-advisory
- http://secwatch.org/advisories/secwatch/20050530_yapig.txt
- 1014103 vdb-entry