CVE-2007-1010

CVE-2007-1010 affects ZebraFeeds 1.0 and involves PHP remote file inclusion via the zf_path parameter used by aggregator.php and controller.php in newsfeeds/includes/. When register_globals is enabled, a remote attacker can supply a URL in zf_path to cause arbitrary PHP code execution. Documents ...