Description
PHP remote file inclusion vulnerability in functions.php in DeltaScripts PHP Classifieds 7.1 allows remote attackers to execute arbitrary PHP code via a URL in the set_path parameter.
References
- 1778 third-party-advisory
- 20061020 PHP Classifieds 7.1 - Remote File Include Vulnerability mailing-list
- 20649 vdb-entry
- phpclassifieds-functions-file-include(29687) vdb-entry