Description
Remote file inclusion vulnerability in Contenido CMS allows remote attackers to execute arbitrary PHP code via a URL in the contenido_path parameter to (1) cms/dbfs.php or (2) cms/front_content.php. NOTE: CVE disputes this issue for version 4.6.15, because $contenido_path is set to a static value
References
- 20061013 CMS contenido Remote File Inclusion mailing-list
- 20061017 Contenido RFI - CVE dispute mailing-list
- contenido-contenido-file-include(29549) vdb-entry
- 1739 third-party-advisory