Description
PHP remote file inclusion vulnerability in phpthumb.php in Jetbox CMS allows remote attackers to execute arbitrary PHP code via a URL in the includes_path parameter. NOTE: The relative_script_path vector is already covered by CVE-2006-2270.
References
- 19303 vdb-entry
- jetboxcms-phpthumb-file-include(28843) vdb-entry
- 1562 third-party-advisory
- 20060909 Multible injections and vulnerabilities in Jetbox CMS mailing-list