Description
PHP remote file inclusion vulnerability in top/list.php in phpBB TopList 1.3.8 and earlier allows remote attackers to include arbitrary files via the returnpath parameter.
References
- toplist-toplist-list-file-include(26172) vdb-entry
- 20060428 TopList <= 1.3.8 (PHPBB Hack) Remote File Inclusion Vulnerability mailing-list
- 25294 vdb-entry