PHP remote file inclusion vulnerability in Bookmark4U 2.0.0 and earlier allows remote attackers to include arbitrary PHP files via the include_prefix parameter in (1) inc/dbase.php, (2) inc/config.php, (3) inc/common.php, and (4) inc/function.php. NOTE: it has been reported that the inc directory is protected by a .htaccess file, so this issue only applies in certain environments or configurations.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.osvdb.org/26601 | vdb-entry x_refsource_OSVDB |
| http://www.osvdb.org/26600 | vdb-entry x_refsource_OSVDB |
| http://www.securityfocus.com/archive/1/436027/100/0/threaded | mailing-list x_refsource_BUGTRAQ |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/26933 | vdb-entry x_refsource_XF |
| http://secunia.com/advisories/19758 | third-party-advisory x_refsource_SECUNIA |
| http://www.osvdb.org/26602 | vdb-entry x_refsource_OSVDB |
| http://www.osvdb.org/26599 | vdb-entry x_refsource_OSVDB |
| http://securityreason.com/securityalert/1058 | third-party-advisory x_refsource_SREASON |
| http://www.securityfocus.com/archive/1/435964/100/0/threaded | mailing-list x_refsource_BUGTRAQ |
| http://www.securityfocus.com/bid/18281 | vdb-entry x_refsource_BID |
| http://securitytracker.com/id?1016224 | vdb-entry x_refsource_SECTRACK |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.osvdb.org/26601 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/26600 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.securityfocus.com/archive/1/436027/100/0/threaded | mailing-list x_refsource_BUGTRAQ x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/26933 | vdb-entry x_refsource_XF x_transferred |
| http://secunia.com/advisories/19758 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.osvdb.org/26602 | vdb-entry x_refsource_OSVDB x_transferred |
| http://www.osvdb.org/26599 | vdb-entry x_refsource_OSVDB x_transferred |
| http://securityreason.com/securityalert/1058 | third-party-advisory x_refsource_SREASON x_transferred |
| http://www.securityfocus.com/archive/1/435964/100/0/threaded | mailing-list x_refsource_BUGTRAQ x_transferred |
| http://www.securityfocus.com/bid/18281 | vdb-entry x_refsource_BID x_transferred |
| http://securitytracker.com/id?1016224 | vdb-entry x_refsource_SECTRACK x_transferred |