Description
Multiple PHP remote file inclusion vulnerabilities in index.php in Dayfox Blog allow remote attackers to execute arbitrary PHP code via a URL in the (1) page, (2) subject, and (3) q parameters.
References
- 23661 third-party-advisory
- ADV-2007-0099 vdb-entry
- 20070107 Dayfox Blog Remote File Include Vuln. mailing-list
- 31259 vdb-entry
- 2117 third-party-advisory
- dayfoxblog-index-file-include(31336) vdb-entry