Security Advisory

CVE-2010-0983

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-03-16 19:00:00
Last updated 2024-08-07 01:06:52
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

PHP remote file inclusion vulnerability in include/mail.inc.php in Rezervi 3.0.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the root parameter, a different vector than CVE-2007-2156.