CVE-2007-1790

CVE-2007-1790 describes multiple PHP remote file inclusion vulnerabilities in Kaqoo Auction Software Free Edition. An attacker can exploit the install_root parameter to load arbitrary files via URLs in a long list of include paths (including core, display, and root include directories), potential...