Description
Multiple eval injection vulnerabilities in the help function in PHPKIT 1.6.1 R2 and earlier, when register_globals is enabled, allow remote attackers to execute arbitrary code on the server via unknown attack vectors involving uninitialized variables.
References
- 1015167 vdb-entry
- 15354 vdb-entry
- phpkit-eval-code-execution(23015) vdb-entry
- 20051105 Advisory 21/2005: Multiple vulnerabilities in PHPKIT mailing-list
- 20563 vdb-entry
- ADV-2005-2344 vdb-entry
- 17479 third-party-advisory
- http://www.hardened-php.net/advisory_212005.80.html