Multiple PHP remote file inclusion vulnerabilities in index.php in Dayfox Blog allow remote attackers to execute arbitrary PHP code via a URL in the (1) page, (2) subject, and (3) q parameters.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Dayfox_blog | Dayfox_designs | 4 (including) | 4 (including) |