PHP remote file inclusion vulnerability in include/yapbb_session.php in YapBB 1.2 Beta2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[include_Bit] parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Yapbb | Yapbb | * | 1.2_beta2 (including) |
| Yapbb | Yapbb | 1.1 (including) | 1.1 (including) |
| Yapbb | Yapbb | 1.2 (including) | 1.2 (including) |