Description
PHP remote file inclusion vulnerability in controller.php in Simple Invoices before 20070202 allows remote attackers to execute arbitrary PHP code via a URL in the (1) module or (2) view parameter. NOTE: some of these details are obtained from third party information.
References
- 31796 vdb-entry
- 24040 third-party-advisory
- http://www.simpleinvoices.org/index.php?news=25
- 22389 vdb-entry
- simpleinvoices-controller-file-include(32207) vdb-entry
- ADV-2007-0481 vdb-entry