Summary
The remote web server contains a PHP script that is affected by a remote code execution issue.
Description:
The version of PHP Easy Download installed on the remote host fails to sanitize input to the 'moreinfo' parameter before using it in the 'save.php' script. By sending a specially-crafted value, an attacker can store and execute code at the privilege level of the remote web server.
Solution
Unknown at this time.
