Description
PHP remote file inclusion vulnerability in authent.php4 in Nicolas Fischer (aka NFec) RechnungsZentrale V2 1.1.3, and possibly earlier versions, allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter.
References
- ADV-2006-1425 vdb-entry
- 24753 vdb-entry
- 20060419 RechnungsZentrale V2 - SQL injection and Remote PHP inclusion vulnerabilities mailing-list
- 17589 vdb-entry
- http://www.g-0.org/code/rz2-adv.html
- rechnungszentrale-authent-file-inclusion(25912) vdb-entry
- 1699 exploit
- 19728 third-party-advisory