PHP remote file inclusion vulnerability in includes/functions/layout.php in Nexty 1.01.A Beta allows remote attackers to execute arbitrary PHP code via a URL in the rel parameter. NOTE: this issue is disputed by CVE because the applicable include is in a function that is not called on a direct request
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
http://arfis.wordpress.com/2007/09/14/rfi-02-nexty/ |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2007-10-01T00:00:00Z
Updated: 2024-09-16T20:58:57.475Z
Reserved: 2007-09-30T00:00:00Z
Link: CVE-2007-5163
Vulnrichment
No data.
NVD
Status : Modified
Published: 2007-10-01T05:17:00.000
Modified: 2024-08-07T16:15:22.893
Link: CVE-2007-5163
Redhat
No data.