Full title: Vanilla Forums 2.0.18.5 Local File Inclusion 
Category: web applications
Platform: php
Vanilla Forums versions 2.0.18.5 and below suffer from a PHP object injection vulnerability in class.utilitycontroller.php that in turn allows for local file inclusion.

# 0day.today @ http://0day.today/