Description
PHP remote file inclusion vulnerability in index.php in All Enthusiast ReviewPost 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the RP_PATH parameter.
References
- ADV-2006-3658 vdb-entry
- http://www.nyubicrew.org/adv/home_edition2001-adv-01.txt
- 21971 third-party-advisory
- 1603 third-party-advisory
- reviewpostphppro-rppath-file-include(28992) vdb-entry
- 20060915 SolpotCrew Advisory #11 - ReviewPost 2.5 (RP_PATH) Remote File Inclusion mailing-list