Description
PHP remote file inclusion vulnerability in viewevent.php in myWebland myEvent 1.x allows remote attackers to execute arbitrary PHP code via a URL in the myevent_path parameter, a different vector than CVE-2006-4040. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
References
- 19680 third-party-advisory
- myevent-myevent-file-include(28347) vdb-entry
- ADV-2006-1384 vdb-entry