Description
PHP remote file inclusion vulnerability in upload/admin/team.php in Robin de Graff Somery 0.4.4 allows remote attackers to execute arbitrary PHP code via a URL in the checkauth parameter. NOTE: CVE disputes this vulnerability because the checkauth parameter is only used in conditionals
References
- http://www.root-security.org/danger/Somery.txt
- 20060613 REMOTE FILE INCLUSION ( ALL ) mailing-list
- http://packetstorm.linuxsecurity.com/0606-exploits/Somery.txt
- 20070212 CVE dispute - old Somery team.php RFI mailing-list
- 27662 vdb-entry
- 18412 vdb-entry