Vulnerabilities > Stadtaus > Tell A Friend Script

DATE CVE VULNERABILITY TITLE RISK
2005-05-02 CVE-2005-0679 Code Injection vulnerability in Stadtaus Tell A Friend Script
PHP remote file inclusion vulnerability in tell_a_friend.inc.php for Tell A Friend Script 2.7 before 20050305 allows remote attackers to execute arbitrary PHP code by modifying the script_root parameter to reference a URL on a remote web server that contains the code.
network
low complexity
stadtaus CWE-94
7.5