Description
PHP remote file inclusion vulnerability in library/authorize.php in IDevSpot PhpHostBot allows remote attackers to execute arbitrary PHP code via a URL in the login_form parameter, a different vector than CVE-2006-3776.
References
- http://www.m3ks.org/adv/m3ks-adv-24.7.07.txt
- 2932 third-party-advisory
- 20070726 SolpotCrew Advisory #14 (S4M3K) - PhpHostBot (login_form) Remote File Inclusion mailing-list