CVE-2007-1708

The CVE-2007-1708 entry describes a PHP remote file inclusion in ttCMS, affecting ttCMS 4 and earlier. The vulnerability resides in lib/db/ez_sql.php and allows an attacker to execute arbitrary PHP code by supplying a URL in the lib_path parameter that is included by the application. This leads t...