Description
PHP remote file inclusion vulnerability in external/rssfeeds.php in BSQ Sitestats (component for Joomla) 1.8.0, and possibly other versions before 2.2.1, allows remote attackers to execute arbitrary PHP code via the baseDir parameter.
References
- 29287 vdb-entry
- 20267 vdb-entry
- bsq-sitestats-rssfeeds-file-include(29269) vdb-entry
- http://developer.joomla.org/sf/sfmain/do/viewProject/projects.bsq_sitestats
- 2360 third-party-advisory
- 20060929 Secunia Research: Joomla BSQ Sitestats Component MultipleVulnerabilities mailing-list
- http://secunia.com/secunia_research/2006-63/advisory/