Description
PHP remote file inclusion vulnerability in inc/CONTROL/import/import-mt.php in b2evolution 1.8.5 through 1.9 beta allows remote attackers to execute arbitrary PHP code via a URL in the inc_path parameter.
Remediation
References
Related Vulnerabilities
e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2017-8098)
Grafana Uncontrolled Resource Consumption Vulnerability (CVE-2026-33382)
Play Framework Inadequate Encryption Strength Vulnerability (CVE-2019-17598)
WordPress Plugin WP Ad Guru Lite Cross-Site Scripting (1.6.0)
WordPress Plugin Simple Personal Message SQL Injection (1.0.3)