Description
Direct static code injection vulnerability in config.php in vscripts (aka Kuba Kunkiewicz) [V]Book (aka VBook) 2.0 allows remote administrators to execute arbitrary PHP code into the config file, which is included other [V]Book scripts.
References
- 19448 third-party-advisory
- 20060411 [eVuln] [V]Book Multiple Vulnerabilities mailing-list
- 24272 vdb-entry
- ADV-2006-1174 vdb-entry
- http://evuln.com/vulns/111
- vbook-config-file-include(25522) vdb-entry