cve/2010/CVE-2010-4884.md

CVE-2010-4884

Description

PHP remote file inclusion vulnerability in guestbook/gbook.php in Gaestebuch 1.2 allows remote attackers to execute arbitrary PHP code via a URL in the script_pfad parameter.

POC

Reference

• http://packetstormsecurity.org/1008-exploits/hinnendahlgb-rfi.txt
• http://securityreason.com/securityalert/8436

Github

No PoCs found on GitHub currently.