Description
Multiple PHP remote file inclusion vulnerabilities in Phorum 5.1.14, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via unspecified vectors related to an uninitialized variable.
References
- 20060713 Phorum 5.1.15 security release (fixes "PHORUM 5 arbitrary local inclusion") mailing-list
- 21043 third-party-advisory
- 27164 vdb-entry
- http://www.phorum.org/phorum5/read.php?14%2C114358
- ADV-2006-2794 vdb-entry
- 27167 vdb-entry
- http://retrogod.altervista.org/phorum5_local_incl_xpl.html
- 20060713 PHORUM 5 arbitrary local inclusion mailing-list