PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the module_name parameter.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Mermaid_module | Php-nuke | 1.2 (including) | 1.2 (including) |