Multiple PHP remote file inclusion vulnerabilities in Campware Campsite prior to 20061110 allow remote malicious users to execute arbitrary PHP code via a URL in the g_documentRoot parameter to (1) bugreporter/thankyou.php and (2) feedback/thankyou.php in implementation/management/priv/.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
campware.org campsite 2.6.0 |
||
campware.org campsite 2.6.1 |