| Package | Affected versions | Patched versions |
|---|---|---|
| txtforum | ≤ 1.0.4_dev |
PHP remote file include vulnerability in common.php in txtForum 1.0.4-dev and earlier allows remote attackers to include and execute arbitrary PHP code via a URL in the skin parameter to login.php, and possibly other parameters to other PHP scripts, related to include statements in common.php.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free