Dark Hart Portal (darkportal) PHP script allows remote attackers to include arbitrary files from remote web sites via an HTTP request that sets the includedir variable.
| Software | From | Fixed in |
|---|---|---|
| dark_hart_portal / darkportal-unix | 0.1.17 | 0.1.17.x |
| dark_hart_portal / darkportal-unix | 0.1.16 | 0.1.16.x |
| dark_hart_portal / darkportal-unix | 0.1.18 | 0.1.18.x |