PHP file inclusion vulnerability in protection.php in CodeGrrl (a) PHPCalendar 1.0, (b) PHPClique 1.0, (c) PHPCurrently 2.0, (d) PHPFanBase 2.1, and (e) PHPQuotes 1.0 allows remote attackers to include arbitrary local files via the siteurl parameter when register_globals is enabled. NOTE: It was later reported that PHPFanBase 2.2 is also affected.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2005-11-16T07:37:00
Updated: 2024-08-07T23:17:23.379Z
Reserved: 2005-11-16T00:00:00
Link: CVE-2005-3571
Vulnrichment
No data.
NVD
Status : Modified
Published: 2005-11-16T07:42:00.000
Modified: 2016-10-18T03:36:14.593
Link: CVE-2005-3571
Redhat
No data.