PHP remote file inclusion vulnerability in download_center_lite.inc.php for Download Center Lite 1.6 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code.
References
Link | Resource |
---|---|
http://www.stadtaus.com/forum/p-5895.html | |
http://www.stadtaus.com/forum/t-1579.html | Patch Vendor Advisory |
http://secunia.com/advisories/14513 | Patch Vendor Advisory |
http://marc.info/?l=bugtraq&m=110996056601719&w=2 |
Configurations
Information
Published : 2005-03-06 21:00
Updated : 2016-10-17 20:13
NVD link : CVE-2005-0680
Mitre link : CVE-2005-0680
JSON object : View
CWE
Products Affected
stadtaus
- download_center_lite