CVE-2010-4998 | BDVDB-2026-48062 Detail

Description#

PHP remote file inclusion vulnerability in ardeaCore/lib/core/ardeaInit.php in ardeaCore PHP Framework 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the pathForArdeaCore parameter. NOTE: some of these details are obtained from third party information.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2010/1444
http://securityreason.com/securityalert/8503
http://packetstormsecurity.org/1006-exploits/ardeacore-rfi.txt
http://www.securityfocus.com/bid/40811
http://www.exploit-db.com/exploits/13832/
http://secunia.com/advisories/40207

Exploit#

http://www.exploit-db.com/exploits/13832/

History#

Version 12011-11-02Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.