CVE-2007-0172

CVE-2007-0172 concerns AllMyGuests 0.3.0 and earlier. Concrete details in connected docs show multiple PHP remote file inclusion vulnerabilities triggered by the AMG_serverpath parameter, enabling an attacker to execute arbitrary PHP code via (1) comments.php and (2) signin.php, and possibly via ...