Description
Multiple PHP remote file inclusion vulnerabilities in Der Dirigent (DeDi) 1.0.3 allow remote attackers to execute arbitrary PHP code via a URL in the cfg_dedi[dedi_path] parameter in (1) find.php, (2) insert_line.php, (3) fullscreen.php, (4) changecase.php, (5) insert_link.php, (6) insert_table.php, (7) table_cellprop.php, (8) table_prop.php, (9) table_rowprop.php, (10) insert_page.php, and possibly insert_marquee.php in backend/external/wysiswg/popups/.
References
- 29957 vdb-entry
- der-dirigent-cfgdedi-file-include(29760) vdb-entry
- 29951 vdb-entry
- ADV-2006-4164 vdb-entry
- 20702 vdb-entry
- 29952 vdb-entry
- 29954 vdb-entry
- 29955 vdb-entry
- 29950 vdb-entry
- 29958 vdb-entry
- 29953 vdb-entry
- 29956 vdb-entry
- 29959 vdb-entry
- http://packetstormsecurity.org/0610-exploits/Derdirigent.txt
- 22546 third-party-advisory