Multiple PHP remote file inclusion vulnerabilities in Pie 0.5.3 allow remote attackers to execute arbitrary PHP code via a URL in the (1) lib parameter to files in lib/action/ including (a) alias.php, (b) cancel.php, (c) context.php, (d) deadlinks.php, (e) delete.php, and others; and the (2) GLOBALS[pie][library_path] parameter to files in lib/share/ including (f) diff.php, (g) file.php, (h) locale.php, (i) mapfile.php, (j) page.php, and others.
Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-07T10:49:12.482Z

Reserved: 2008-12-04T00:00:00

Link: CVE-2008-5332

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2008-12-05T01:30:00.283

Modified: 2025-04-09T00:30:58.490

Link: CVE-2008-5332

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.