CVE-2007-1516

CVE-2007-1516 describes a PHP remote file inclusion vulnerability in the CcMail 1.0 package, where an attacker can cause arbitrary PHP code execution by supplying a URL in the functions_dir parameter of functions/update.php. The affected product is Cicoandcico CcMail 1.0, and the underlying issue...