Multiple PHP remote file inclusion vulnerabilities in W-Agora 4.0 allow remote attackers to execute arbitrary PHP code via a URL in the bn_dir_default parameter to (1) add_user.php, (2) create_forum.php, (3) create_user.php, (4) delete_notes.php, (5) delete_user.php, (6) edit_forum.php, (7) mail_users.php, (8) moderate_notes.php, and (9) reorder_forums.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2008-03-24T21:00:00

Updated: 2024-08-07T08:24:42.641Z

Reserved: 2008-03-24T00:00:00

Link: CVE-2008-1466

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2008-03-24T21:44:00.000

Modified: 2024-11-21T00:44:36.420

Link: CVE-2008-1466

cve-icon Redhat

No data.