Multiple PHP remote file inclusion vulnerabilities in Bob Jewell Discloser 0.0.4 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the fileloc parameter to (1) content/content.php or (2) /inc/indexhead.php.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Discloser | Bob_jewell | * | 0.0.4 (including) |