Multiple PHP remote file inclusion vulnerabilities in (1) eday.php, (2) eshow.php, or (3) forgot.php in albinator 2.0.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the Config_rootdir parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Albinator | Albinator | 2.0.8 (including) | 2.0.8 (including) |