Description
Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) index.php, (2) aemodule.php, (3) browse.php, (4) cc.php, (5) click.php, (6) faq.php, (7) gallery.php, (8) im.php, (9) inbox.php, (10) join_form.php, (11) logout.php, (12) messages_inbox.php, and many other scripts.
References
- 1016692 vdb-entry
- 28501 vdb-entry
- 28492 vdb-entry
- 21182 vdb-entry
- 28527 vdb-entry
- 28525 vdb-entry
- 28517 vdb-entry
- 28499 vdb-entry
- 28526 vdb-entry
- 28502 vdb-entry
- 28515 vdb-entry
- 28511 vdb-entry
- 28521 vdb-entry
- 28479 vdb-entry
- 28516 vdb-entry
- 28508 vdb-entry
- 28507 vdb-entry
- 28504 vdb-entry
- 28510 vdb-entry
- 28514 vdb-entry
- 28522 vdb-entry
- 28505 vdb-entry
- 28529 vdb-entry
- 28500 vdb-entry
- 28478 vdb-entry
- 28509 vdb-entry
- 28485 vdb-entry
- 28512 vdb-entry
- 28528 vdb-entry
- 28513 vdb-entry
- 21535 third-party-advisory
- 28498 vdb-entry
- 28493 vdb-entry
- 28523 vdb-entry
- 28503 vdb-entry
- ADV-2006-3346 vdb-entry
- dolphin-dirinc-file-include(28363) vdb-entry
- 28496 vdb-entry
- 28473 vdb-entry
- 28506 vdb-entry
- 28524 vdb-entry
- 28520 vdb-entry
- 28530 vdb-entry
- 28519 vdb-entry
- 28474 vdb-entry