Security Advisory
CVE-2009-1278
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
Static code injection vulnerability in forms/ajax/configure.php in Gravity Board X (GBX) 2.0 BETA allows remote attackers to inject arbitrary PHP code into config.php via the configure action to index.php.