CVE-2009-4739

Publication date

2010-03-26 20:00:00

Family

mitre

State

PUBLISHED

Description

PHP remote file inclusion vulnerability in index.php in SkaDate Dating allows remote attackers to execute arbitrary PHP code via a URL in the language_id parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via directory traversal sequences.