Multiple PHP remote file inclusion vulnerabilities in LoudMouth 2.4 allow remote attackers to execute arbitrary PHP code via a URL in the mainframe parameter to (1) admin.loudmouth.php or (2) toolbar.loudmouth.php.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Loudmouth | Imendio_ab | 2.4 (including) | 2.4 (including) |