CVE-2005-0748 PHP remote file inclusion vulnerability in initdb.php for WEBInsta Mailing list manager 1.3d allows remote attackers to execute arbitrary PHP code by modifying the absolute_path parameter to reference...
HighCVSS 7.5
EPSS 1.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in initdb.php for WEBInsta Mailing list manager 1.3d allows remote attackers to execute arbitrary PHP code by modifying the absolute_path parameter to reference a URL on a remote web server that contains the code.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| webinsta mailing manager | = 1.3d | No fix listed |
References
- 14550 patch third-party-advisory vendor-advisory
- 1013409 vdb-entry vendor-advisory
- 12773 vdb-entry vendor-advisory
- ADV-2005-0248 vdb-entry vendor-advisory
- webinsta-initdb-file-include(19651) vdb-entry