Description
PHP remote file include vulnerability in PageController.php in KnowledgebasePublisher 1.2 allows remote attackers to include and execute arbitrary PHP code via a URL in the dir parameter.
References
- http://sourceforge.net/project/shownotes.php?release_id=402179&group_id=144153
- 1587 exploit
- 24002 vdb-entry
- 17120 vdb-entry
- ADV-2006-1020 vdb-entry
- knowledgebasepublisher-dir-file-include(25338) vdb-entry
- 19298 third-party-advisory