CVE-2007-2014

CVE-2007-2014 is a PHP remote file inclusion flaw in MyNews 4.2.2. The vulnerability resides in include/blocks/week_events.php and allows remote code execution via a URL supplied to myNewsConf[path][sys][index]. This is a different vector from CVE-2007-0633. Affected product/version: MyNews 4.2.2...