Webodex PHP script 1.0 and earlier allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
Affected Software
Name |
Vendor |
Start Version |
End Version |
Webodex |
Grant_horwood |
* |
1.0 (including) |
References