PHP remote file inclusion vulnerability in core/pdf.php in VideoDB 2.2.1 and earlier allows remote attackers to execute arbitrary PHP code via the config[pdf_module] parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Videodb | Videodb | 2.0.0 (including) | 2.0.0 (including) |
Videodb | Videodb | 2.0.2 (including) | 2.0.2 (including) |
Videodb | Videodb | 2.2.1 (including) | 2.2.1 (including) |