| Package | Affected versions | Patched versions |
|---|---|---|
| minibill | ≤ 1.2.2 |
Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 (1.2.2) allow remote attackers to execute arbitrary PHP code via (1) a URL in the config[include_dir] parameter in actions/ipn.php or (2) an FTP path in the config[plugin_dir] parameter in include/initPlugins.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free