| Package | Affected versions | Patched versions |
|---|---|---|
| phportal | = 0.2.7 |
PHP remote file inclusion vulnerability in form/db_form/employee.php in PHPortal 0.2.7 allows remote attackers to execute arbitrary PHP code via a URL in the DOCUMENT_ROOT parameter. NOTE: this issue is disputed by CVE, since DOCUMENT_ROOT cannot be modified by an attacker
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free