Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when register_globals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the (1) dir[plugins] parameter to (a) HTMLSax3.php and (b) safehtml.php in plugins/safehtml/ and the (2) sIncPath parameter to (c) ray/modules/global/inc/content.inc.php. NOTE: vector 1 might be a problem in SafeHTML instead of Dolphin.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2008-07-14T23:00:00
Updated: 2017-09-28T12:57:01
Reserved: 2008-07-14T00:00:00
Link: CVE-2008-3167
JSON object: View
NVD Information
Status : Modified
Published: 2008-07-14T23:41:00.000
Modified: 2017-09-29T01:31:33.740
Link: CVE-2008-3167
JSON object: View
Redhat Information
No data.
CWE