Description
Multiple PHP remote file inclusion vulnerabilities in my little forum 1.7 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to (1) admin.php and (2) timedifference.php.
References
- 2576 third-party-advisory
- 35402 vdb-entry
- mylittleforum-lang-file-include(33719) vdb-entry
- 20070416 my little forum 1.7 Remote File Include Vulnerabilitiy mailing-list
- 35403 vdb-entry