CVE-2007-1424

CVE-2007-1424 concerns Softnews Media Group DataLife Engine. It describes multiple PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code via a URL supplied to the root_dir parameter in init.php and Ajax/editnews.php. The observed impact is arbitrary code e...