Description
PHP remote file inclusion vulnerability in templates/tmpl_dfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter. NOTE: it is possible that this issue overlaps CVE-2006-4189.
References
- 20576 vdb-entry
- dolphin-index-file-include(29604) vdb-entry
- 1747 third-party-advisory
- 20061018 Boonex Dolphin 5.2 Remote File Inclusion mailing-list