Description
PHP remote file inclusion vulnerability in support/index.php in DeskLance 2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the main parameter.
References
- ADV-2005-2575 vdb-entry
- 17730 third-party-advisory
- http://pridels0.blogspot.com/2005/11/desklance-vuln.html