Description
Multiple PHP remote file inclusion vulnerabilities in Aardvark Topsites PHP 5 allow remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) button/settings_sql.php, (2) settings_sql.php, and (3) sources/misc/new_day.php.
References
- 35224 vdb-entry
- aardvark-settingssql-newday-file-include(33342) vdb-entry
- 35223 vdb-entry
- 35225 vdb-entry
- 2515 third-party-advisory
- 20070331 Remot File Include In Aardvark Topsites PHP 5 mailing-list