Description
PHP remote file inclusion vulnerability in boitenews4/index.php in Boite de News 4.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the url_index parameter.
Affected products
- boite_de_news / boite_de_news4.0.1 – 4.0.1