CVE-2007-2078

CVE-2007-2078 describes a PHP remote file inclusion in Maian Weblog 3.1, where the vulnerability in index.php allows an attacker to execute arbitrary PHP code via a URL in the path_to_folder parameter. The underlying claim is that the path_to_folder variable is used unsafely, though a third‑party...