Description
Multiple PHP remote file inclusion vulnerabilities in BosClassifieds Classified Ads allow remote attackers to execute arbitrary PHP code via a URL in the insPath parameter to (1) index.php, (2) recent.php, (3) account.php, (4) classified.php, or (5) search.php.
References
- 27315 vdb-entry
- 27314 vdb-entry
- 27317 vdb-entry
- 27316 vdb-entry
- ADV-2006-2807 vdb-entry
- 1016447 vdb-entry
- http://www.jaascois.com/exploits/18602018/
- 27318 vdb-entry
- 18883 vdb-entry
- 21056 third-party-advisory
- bosclassifieds-multiple-scripts-file-include(27662) vdb-entry