CVE-2007-1017

The CVE-2007-1017 issue affects VirtualSystem VS-News-System (version 1.2.1 and earlier) where show_news_inc.php accepts the newsordner URL parameter, enabling a PHP remote file inclusion and arbitrary code execution. The root cause is a vulnerable inclusion path that allows remote attackers to D...