CVE-2007-1620

CVE-2007-1620: Affects PHP DB Designer 1.02 and earlier. Multiple remote PHP File Inclusion vulnerabilities allow an attacker to craft a URL that sets _SESSION[SITE_PATH] (to wind/help.php or wind/about.php) or _SESSION[DRIVER] (to db/session.php), enabling remote code execution via an included P...