Description
Direct static code injection vulnerability in Pro Publish 2.0 allows remote authenticated administrators to execute arbitrary PHP code by editing certain settings, which are stored in set_inc.php.
References
- 19882 third-party-advisory
- ADV-2006-1578 vdb-entry
- 17762 vdb-entry
- 25128 vdb-entry
- propublish-setinc-file-include(26149) vdb-entry
- http://evuln.com/vulns/130/summary.html