PHP remote file inclusion vulnerability in CheckUpload.php in Vincenzo Valvano Comet WebFileManager (CWFM) 0.9.1, and possibly earlier, allows remote malicious users to execute arbitrary PHP code via a URL in the Language parameter.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
comet comet webfile manager |