CVE-2007-1628

CVE-2007-1628 involves multiple PHP remote file inclusion vulnerabilities in Study planner (Studiewijzer) 0.15 and earlier. When register_globals is enabled, an attacker can execute arbitrary PHP code by supplying a URL in the SPL_CFG[dirroot] parameter to various files (e.g., service.alert.inc.p...