PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) 0.3.1 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the config[sipssys] parameter. NOTE: the product's documentation recommends placing the affected file outside of the web root, so the scope of issue is limited to admins who do not, or cannot, follow this recommendation.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
sips sips |
||
sips sips 0.3.0pl1 |
||
sips sips 0.3.0pl2 |
||
sips sips 0.2.2 |
||
sips sips 0.2.4 |
||
sips sips 0.3.0 |
Vulmon