Description
Multiple PHP remote file inclusion vulnerabilities in Albrecht Guenther PHProjekt 5.1.x before 5.1.2 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lib_path or (2) lang_path parameter in unspecified files, related to code changes intended to fix inclusion, a different vulnerability than CVE-2002-0451, CVE-2006-4204, and CVE-2006-4609.
References
- 22167 third-party-advisory
- 29290 vdb-entry
- http://www.hardened-php.net/advisory_062006.129.html
- 20268 vdb-entry
- 20060929 Advisory 06/2006: PHProjekt (Remote) Include Vulnerabilities mailing-list
- phprojekt-unspecified-file-include(29262) vdb-entry
- ADV-2006-3845 vdb-entry
- http://www.phprojekt.com/modules.php?op=modload&name=News&file=article&sid=259
- 1672 third-party-advisory