CVE-2007-0831

Atsphp 5.0.1 is affected by multiple PHP remote file inclusion vulnerabilities via the CONF[path] parameter in API endpoints (index.php, sources/usercp.php, sources/admin.php). The root cause is improper handling of CONF[path], enabling arbitrary PHP code execution. Note that a researcher dispute...