NuytsTech Security

CVE-2010-5038

by ·

PHP remote file inclusion vulnerability in contact/contact.php in Groone’s Simple Contact Form allows remote attackers to execute arbitrary PHP code via a URL in the abspath parameter.

Date published : 2011-11-02

http://www.securityfocus.com/archive/1/511551/100/0/threaded

http://packetstormsecurity.org/1005-exploits/groonescf-rfi.txt

Tags: