PHP remote file include vulnerability in index.php in SMartBlog (aka SMBlog) 1.2 allows remote attackers to include and execute arbitrary PHP files via (1) the pg parameter and (2) a query string without a parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Smartblog | Smartblog | 1.2 (including) | 1.2 (including) |