CVE-2007-5994: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in checknoimage.php in Fritz Berger yet another php photo album - next generation yappa-ng 2.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the configpathsrcinclude parameter...

yappa-ng-rfi.txt

yappa-ng 2.3.2 RFI ---------- Author : ShAy6oOoN ---------- Group : PitBull Crew ---------- Script : yappa-ng 2.3.2 ---------- Download : http://downloads.sourceforge.net/yappa-ng/yappa-ng232.zip?modtime=1114464654&bigmirror=0 ---------- Vuln Type: RFI ---------- Registerglobals: ON...