Multiple PHP remote file inclusion vulnerabilities in Sun Board 1.00.00 Alpha allow remote attackers to execute arbitrary PHP code via a URL in (1) the sunPath parameter to include.php or (2) the dir parameter to skin/board/default/doctype.php.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Sun_board | Kim_kyoung_min | 1.00.00_alpha (including) | 1.00.00_alpha (including) |