CVE-2008-6305
26.02.2009, 23:30
PHP remote file inclusion vulnerability in init.php in Free Directory Script 1.1.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the API_HOME_DIR parameter.
Vendor | Product | Version |
---|---|---|
freedirectoryscript | free_directory_script | 1.1.1 |
𝑥
= Vulnerable software versions
References