CVE-2007-5166

2007-10-01T05:17:00
ID CVE-2007-5166
Type cve
Reporter cve@mitre.org
Modified 2008-11-15T06:59:00

Description

Multiple PHP remote file inclusion vulnerabilities in SiteSys 1.0a allow remote attackers to execute arbitrary PHP code via a URL in the doc_root parameter to (1) inc/pagehead.inc.php or (2) inc/pageinit.inc.php.