CVE

Id
12428  
CVE No.
CVE-2005-1222  
Status
Candidate  
Description
cat_for_gen.php in Annuaire Netref 4.2 allows remote attackers to execute arbitrary PHP code by setting the ad_direct parameter to reference cat_for_gen.php, then including the code in the m_for_racine parameter, which is then written to cat_for_gen.php.  
Phase
Assigned (20050422)  
Votes
None (candidate not yet proposed)  
Comments