Intrusion Prevention

MyPHP.CMS.Global.header.PHP.Remote.File.Inclusion

Description

It indicates a possible exploit of a remote file inclusion vulnerability in /styles/default/global_header.php in MyPHP CMS, that may allow remote attackers to execute arbitrary PHP code via a URL in the domain parameter.

Affected Products

MyPHP CMS MyPHP CMS 0.3.1
MyPHP CMS MyPHP CMS 0.3

Impact

Compromise of affected system.

Recommended Actions

Currently we are not aware of any vendor-supplied patches for this issue.

CVE References

CVE-2006-3478