Description
PHP remote file inclusion vulnerability in admin/public/webpages.php in Eba News 1.1 allows remote attackers to execute arbitrary PHP code via a URL in the filename parameter.
References
- http://ebascripts.com/
- 20070420 Eba News Version : v1.1 <= (webpages.php) Remote File Include // starhack.org mailing-list
- 2607 third-party-advisory
- ebanews-webpages-file-include(33783) vdb-entry