CVE-2007-2286

Description

PHP remote file inclusion vulnerability in config.php in Built2Go PHP Link Portal 1.79 allows remote attackers to execute arbitrary PHP code via a URL in the full_path_to_db parameter.

Affected products

• built2go / php_link_portal1.79 – 1.79

References

• MISChttp://www.securityfocus.com/bid/23651
• MISChttp://www.securityfocus.com/archive/1/466865/100/0/thread
• MISChttp://osvdb.org/34166