Description
Multiple PHP remote file inclusion vulnerabilities in ubbt.inc.php in Groupee UBB.threads 6.5.1.1 allow remote attackers to execute arbitrary PHP code via a URL in the (1) GLOBALS[thispath] or (2) GLOBALS[configdir] parameter.
References
- ubbthreads-multiple-file-include(29274) vdb-entry
- 1676 third-party-advisory
- 20266 vdb-entry
- 20060929 UBB.threads Multiple input validation error mailing-list