CVE-2007-0171

AllMyLinks 0.5.0 and earlier are affected by a PHP remote file inclusion in index.php via the AML_opensite parameter, enabling arbitrary PHP code execution. The root cause is a inadequate validation/handling of user-supplied URLs in AML_opensite. Affected component: index.php; vulnerable function...