Description
PHP remote file inclusion vulnerability in lang.php in SPiD before 1.3.1 allows remote attackers to execute arbitrary code via the lang_path parameter.
References
- 16022 third-party-advisory
- 14208 vdb-entry
- 1014437 vdb-entry
- http://spid.adnx.net/index_en.html#log