Description
PHP remote file inclusion vulnerability in admin.php in Advanced Guestbook 2.3.1 allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter.
References
- 30230 vdb-entry
- 20902 vdb-entry
- 20061103 Advanced Guestbook 2.3.1 (Admin.php) Remote File Include mailing-list
- 1833 third-party-advisory
- ADV-2006-4385 vdb-entry
- 22756 third-party-advisory