CVE-2006-4373 – “PSlash Remote Code Execution”

Description

PHP remote file inclusion vulnerability in modules/visitors2/include/config.inc.php in pSlash 0.70 allows remote attackers to execute arbitrary PHP code via a URL in the lvc_include_dir parameter.


Vulnerability Information

  • Product / Framework: Derek_leung
  • Vendor Domain: sourceforge.net
  • Vulnerability Type: Code Injection
  • CVE Details: View Full CVE Details →