CVE-2007-1855

CVE-2007-1855 describes multiple PHP remote file inclusion vulnerabilities in Shop-Script FREE, specifically in smarty/smarty_class.php, enabling an attacker to execute arbitrary PHP code by supplying a URL to one of five parameters (_smarty_compile_path, smarty_compile_path, get_plugin_filepath,...