PHP remote file inclusion vulnerability in public_includes/pub_popup/popup_finduser.php in PHP Blue Dragon Platinum 2.8.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Php_blue_dragon | Blue_dragon | platinum_2.8.0 (including) | platinum_2.8.0 (including) |