PHP remote file inclusion vulnerability in index.php in FreeForum 0.9.0 allows remote malicious users to execute arbitrary PHP code via a URL in the fpath parameter. NOTE: this issue has been disputed by third party researchers, stating that fpath variable is initialized before being used
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
zoneo-soft freeforum 0.9.0 |