Date: 06/21/06 (Java Web) Keywords: cms, php Archit3ct and IR4DEX GROUP have discovered a vulnerability in SmartSiteCMS, which can be exploited by malicious people to compromise a vulnerable system. Input passed to the “root” parameter in include/inc_foot.php is not properly verified before being used to include files. This can be exploited to execute arbitrary PHP code by including files from local or external [...]
|