CVE-2007-2311

CVE-2007-2311 describes a PHP remote file inclusion in BlooFoxCMS 0.2.2, specifically in install/index.php, allowing an attacker to execute arbitrary PHP code via a URL placed in the content_php parameter. The root cause is the handling of user-controlled content_php leading to code execution; th...