PHP file inclusion vulnerability in protection.php in CodeGrrl (a) PHPCalendar 1.0, (b) PHPClique 1.0, (c) PHPCurrently 2.0, (d) PHPFanBase 2.1, and (e) PHPQuotes 1.0 allows remote attackers to include arbitrary local files via the siteurl parameter when register_globals is enabled. NOTE: It was later reported that PHPFanBase 2.2 is also affected.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2005-11-16 07:42
Updated : 2024-02-28 10:42
NVD link : CVE-2005-3571
Mitre link : CVE-2005-3571
CVE.ORG link : CVE-2005-3571
JSON object : View
Products Affected
codegrrl
- phpcalendar
- phpquotes
- phpfanbase
- phpclique
- phpcurrently
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')