Rumble CVE-2006-2872 Remote File Include Vulnerability

Rumble is prone to a remote file include vulnerability. PHP remote file inclusion vulnerability in config.php in Rumble 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the configArr[pathtodir] parameter.


 

Privacy Statement
Copyright 2010, SecurityFocus