Description
PHP remote file inclusion vulnerability in agenda.php3 in phpMyAgenda 3.0 Final and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootagenda parameter.
References
- 17670 vdb-entry
- 24943 vdb-entry
- 20060515 tyree[at]users.sourceforge.net mailing-list
- 787 third-party-advisory
- ADV-2006-1509 vdb-entry
- phpmyagenda-rootagenda-file-include(26062) vdb-entry
- 1015984 vdb-entry
- http://downloads.securityfocus.com/vulnerabilities/exploits/phpMyAgenda_fi.txt
- http://osvdb.org/ref/29/2914x-phpmyagenda.txt
- 19748 third-party-advisory
- 20060424 [MajorSecurity] phpMyAgenda 3.0 Final - Remote File Include Vulnerability mailing-list