Description
PHP remote file inclusion vulnerability in common.php in PunBB 1.1.2 through 1.1.5 allows remote attackers to execute arbitrary code via the pun_root parameter.
References
- 20051024 Remote File Inclusion in forum PunBB mailing-list
- 15175 vdb-entry
- 107 third-party-advisory