PHP remote file inclusion vulnerability in index.php in Josh Schmidt WikyBlog 1.2.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the includeDir parameter.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Wikyblog | Wikyblog | * | 1.2.3 (including) |
| Wikyblog | Wikyblog | 1.2.1 (including) | 1.2.1 (including) |
| Wikyblog | Wikyblog | 1.2.2 (including) | 1.2.2 (including) |