CVE-2007-1472

CVE-2007-1472 affects Groupit 2.00b5: a variable overwrite vulnerability in groupit.start.inc allows remote inclusion and arbitrary PHP execution by arguments written to $_GLOBALS. Exploitation demonstrated via c_basepath URL parameter to content.php, userprofile.php, password.php, dispatch.php, ...