CVE-2007-2095

PHP remote file inclusion vulnerability in chat.php in MySpeach 1.9 allows remote attackers to execute arbitrary PHP code via a URL in the myroot parameter, a different vector than CVE-2007-0498...

CVE-2007-2095

CVE-2007-2095 documents a PHP remote file inclusion in MySpeach 1.9 (chat.php) that allows an attacker to execute arbitrary PHP code by supplying a URL in the my[root] parameter. This is a distinct vector from CVE-2007-0498. Evidence across sources confirms the RFI flaw but provides no patch deta...