CVE-2007-2540

CVE-2007-2540 affects PMECMS 1.0 and earlier, with multiple PHP remote file inclusion vulnerabilities. The root cause is an exploitable config[pathMod] parameter in index.php that allows remote attackers to specify a URL to include (modules: mod/image/, mod/liens/, mod/liste/, mod/special/, mod/t...