Gentoo: GLSA-200605-04 Normal: phpWebSite Remote Code Execution Risk

Gentoo Linux Security Advisory GLSA 200605-04 https://security.gentoo.org/ Severity: Normal Title: phpWebSite: Local file inclusion Date: May 02, 2006 Bugs: #130295 ID: 200605-04

Synopsis ======= Remote attackers can include local files which may lead to the execution of arbitrary code.
Background ========= phpWebSite provides a complete web site content management system.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 www-apps/phpwebsite < 0.10.2 >= 0.10.2
========== rgod has reported that the "hub_dir" parameter in "index.php" isn't properly verified. When "magic_quotes_gpc" is disabled, this can be exploited to include arbitrary files from local ressourc...