Description
Multiple PHP remote file inclusion vulnerabilities in DCP-Portal 6.1.1 allow remote attackers to execute arbitrary PHP code via a URL in (1) the path parameter to library/adodb/adodb.inc.php, (2) the abs_path_editor parameter to library/editor/editor.php, or (3) the cfgfile_to_load parameter to admin/phpMyAdmin/libraries/common.lib.php.
References
- 35755 vdb-entry
- 2615 third-party-advisory
- dcpportal-adodb-editor-file-include(33876) vdb-entry
- 20070424 dcp-portal v611 >> RFi mailing-list
- dcpportal-common-file-include(33878) vdb-entry