CVE-2007-2540

CVE-2007-2540 affects PMECMS 1.0 and earlier, with multiple PHP remote file inclusion vulnerabilities. The root cause is an exploitable config[pathMod] parameter in index.php that allows remote attackers to specify a URL to include (modules: mod/image/, mod/liens/, mod/liste/, mod/special/, mod/t...

CVE-2007-2540: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in PMECMS 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the configpathMod parameter to index.php in 1 mod/image/, 2 mod/liens/, 3 mod/liste/, 4 mod/special/, or 5 mod/texte/...