Multiple PHP remote file inclusion vulnerabilities in Comdev One Admin Pro 4.1 allow remote malicious users to execute arbitrary PHP code via a URL in the path[skin] parameter to (1) adminfoot.php, (2) adminhead.php, or (3) adminlogin.php.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
comdev comdev one admin pro 4.1 |