Description
Eval injection vulnerability in CHXO Feedsplitter 2006-01-21 allows remote attackers to execute arbitrary PHP code via (1) the file specified as the value of the format parameter, and possibly (2) the RSS feed.
References
- 20060830 feedsplitter considered harmful mailing-list
- 19779 vdb-entry
- 22000 third-party-advisory