PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the module_name parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mermaid_module | Php-nuke | 1.2 (including) | 1.2 (including) |