Description
PHP remote file include vulnerability in admin/index.php in Archangel Weblog 0.90.02 allows remote authenticated administrators to execute arbitrary PHP code via a URL ending in a NULL (%00) in the index parameter.
References
- 1015689 vdb-entry
- 23621 vdb-entry
- 16848 vdb-entry
- archangel-index-file-include(25142) vdb-entry
- 20060226 Archangel Weblog 0.90.02 Admin Authentication Bypass & Remote File Inclusion mailing-list