Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Darkportal-unix | Dark_hart_portal | 0.1.16 (including) | 0.1.16 (including) |
| Darkportal-unix | Dark_hart_portal | 0.1.17 (including) | 0.1.17 (including) |
| Darkportal-unix | Dark_hart_portal | 0.1.18 (including) | 0.1.18 (including) |