Description
PHP remote file inclusion vulnerability in includes/login.php in FreeWebShop 2.2.3 and 2.2.4 before 20070123 allows remote attackers to execute arbitrary PHP code via a URL in the lang_file parameter.
References
- freewebshop-login-file-include(31732) vdb-entry
- 1017549 vdb-entry
- http://www.freewebshop.org/?id=36
- 23898 third-party-advisory
- 32951 vdb-entry
- http://14house.blogspot.com/2007/01/freewebshoporg-remote-file-inclusion.html
- ADV-2007-0319 vdb-entry