Multiple PHP remote file inclusion vulnerabilities in the com_zoom 2.5 beta 2 and previous versions module for Mambo allow remote malicious users to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter to (1) EXIF_Makernote.php or (2) EXIF.php in classes/iptc/.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
mamboxchange com zoom |