aff_liste_langue.php in E-theni allows remote attackers to execute arbitrary PHP code by modifying the rep_include parameter to reference a URL on a remote web server that contains para_langue.php. Successful exploitation requires that "register_globals" is enabled.
Publication date: Wed, 31 Dec 2003 11:00:00 +0000