CVE-2008-3570

Description

PHP remote file inclusion vulnerability in index.php in Africa Be Gone (ABG) 1.0a allows remote attackers to execute arbitrary PHP code via a URL in the abg_path parameter.

Affected products

• africabegone / africa_be_gone1.0a – 1.0a

References

• EXPLOIThttps://www.exploit-db.com/exploits/6183
• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/44195
• MISChttp://securityreason.com/securityalert/4124