Description
PHP remote file inclusion vulnerability in strload.php in Dayana Networks phpOnline (aka PHP-Online) 2.1 allows remote attackers to execute arbitrary PHP code via a URL in the LangFile parameter.
References
- phponline-index-file-include(29382) vdb-entry
- 20061005 phponline <= (LangFile) Remote File Inclusion Exploit mailing-list
- 1721 third-party-advisory