PHP remote file inclusion vulnerability in comment.core.inc.php in Clan Manager Pro (CMPRO) 1.11 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sitepath parameter.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Clan_manager_pro | Cmpro_team | * | 1.11 (including) |
References
- http://sx02.coresec.de/advisories/150.txt
- http://www.osvdb.org/26223
- http://www.vupen.com/english/advisories/2006/2195
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27059
- http://sx02.coresec.de/advisories/150.txt
- http://www.osvdb.org/26223
- http://www.vupen.com/english/advisories/2006/2195
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27059