Security Advisory

CVE-2007-0531

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2007-01-26 01:00:00
Last updated 2024-08-07 12:19:30
Assigner mitre
State PUBLISHED

Description

PHP remote file inclusion vulnerability in includes/login.php in FreeWebShop 2.2.3 and 2.2.4 before 20070123 allows remote attackers to execute arbitrary PHP code via a URL in the lang_file parameter.