Security Advisory

CVE-2003-1086

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2005-02-23 05:00:00
Last updated 2024-08-08 02:12:36
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

PHP remote file inclusion vulnerability in pm/lib.inc.php in pMachine Free and pMachine Pro 2.2 and 2.2.1 allows remote attackers to execute arbitrary PHP code by modifying the pm_path parameter to reference a URL on a remote web server that contains the code.