PHP remote file inclusion vulnerability in modify.php in the XFsection 1.07 module for XOOPS allows remote malicious users to execute arbitrary PHP code via a URL in the dir_module parameter.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
xoops xfsection module 1.07 |