Description
Unspecified "security leak" vulnerability in Contenido before 4.6.4, when register_globals is on and allow_url_fopen is true, has unspecified impact and attack vectors. NOTE: it is likely that this is a PHP remote file include vulnerability.
References
- [fm-news] 20051208 Newsletter for Thursday, December 08th 2005 mailing-list
- 15790 vdb-entry
- ADV-2005-2819 vdb-entry
- 21566 vdb-entry
- http://www.contenido.org/opensourcecms/en/index-b-21-1616.html