Multiple PHP file inclusion vulnerabilities in src/admin/pt_upload.php in Pagetool 1.07 allow remote attackers to execute arbitrary PHP code via (1) a local filename or FTP/share URI in the config_file parameter or (2) a URL in the ptconf[src] parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Pagetool | Pagetool | * | 1.07 (including) |