CVE-2007-0831

Multiple PHP remote file inclusion vulnerabilities in Atsphp 5.0.1 allow remote attackers to execute arbitrary PHP code via a URL in the CONFpath parameter to 1 index.php, 2 sources/usercp.php, or 3 sources/admin.php. NOTE: Another researcher has disputed this vulnerability, noting that CONFpath ...

CVE-2007-0831

Atsphp 5.0.1 is affected by multiple PHP remote file inclusion vulnerabilities via the CONF[path] parameter in API endpoints (index.php, sources/usercp.php, sources/admin.php). The root cause is improper handling of CONF[path], enabling arbitrary PHP code execution. Note that a researcher dispute...