Description
PHP remote file inclusion vulnerability in index.php in Naig 0.5.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the this_path parameter. NOTE: a reliable third party disputes this vulnerability because this_path is defined before use
References
- 20070112 Naig <= 0.5.2 (this_path) Remote File Include Vulnerability mailing-list
- 20070113 Re: Naig <= 0.5.2 (this_path) Remote File Include Vulnerability mailing-list
- 20070112 Fwd: Naig <= 0.5.2 (this_path) Remote File Include Vulnerability mailing-list
- 2145 third-party-advisory
- 33472 vdb-entry