Multiple PHP remote file inclusion vulnerabilities in burnCMS 0.2 and previous versions allow remote malicious users to execute arbitrary PHP code via a URL in the root parameter to (1) mysql.class.php or (2) postgres.class.php in lib/db/; or (3) authuser.php, (4) misc.php, or (5) connect.php in lib/.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
burnstone burncms |