Description
PHP remote file inclusion vulnerability in cat_viewed.php in AL-Caricatier 2.5 allows remote attackers to execute arbitrary PHP code via a URL in the CatName parameter.
References
- 20070804 AL-Caricatier V.2.5 Remote File Include mailing-list
- 39254 vdb-entry
- 2962 third-party-advisory
- alcaricatier-catviewed-xss(35810) vdb-entry