Description
Absolute path traversal vulnerability in index.php in Webspell 4.01.02 allows remote attackers to include and execute arbitrary local files via a full pathname in the site parameter. NOTE: some of these details are obtained from third party information.
References
- 26172 third-party-advisory
- 2927 third-party-advisory
- 20070722 Webspell 4.x Local File Inclusion mailing-list
- 25012 vdb-entry
- 37516 vdb-entry