CVE-2007-0172

Multiple PHP remote file inclusion vulnerabilities in AllMyGuests 0.3.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the AMGserverpath parameter to 1 comments.php and 2 signin.php; and possibly via a URL in unspecified parameters to 3 include/submit.inc.php, 4...

CVE-2007-0172

CVE-2007-0172 concerns AllMyGuests 0.3.0 and earlier. Concrete details in connected docs show multiple PHP remote file inclusion vulnerabilities triggered by the AMG_serverpath parameter, enabling an attacker to execute arbitrary PHP code via (1) comments.php and (2) signin.php, and possibly via ...