Description
Dynamic variable evaluation vulnerability in index.php in Jetbox CMS 2.1 SR1 allows remote attackers to overwrite configuration variables via URL parameters, which are evaluated as PHP variable variables.
References
- 19303 vdb-entry
- 20060802 Secunia Research: Jetbox Multiple Vulnerabilities mailing-list
- 1339 third-party-advisory
- http://secunia.com/secunia_research/2006-57/advisory/
- 20889 third-party-advisory