PHP remote file inclusion vulnerability in publish.php in Textpattern 1.19, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the txpcfg[txpath] parameter.
Vulnerable Products 1
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Textpattern Textpattern
cpe:2.3:a:textpattern:textpattern:1.19:*:*:*:*:*:*:*
|
— | — |