Remote file inclusion

PHP remote file inclusion vulnerability in include/mail.inc.php in Rezervi 3.0.2 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the root parameter, a different vector than CVE-2007-2156...

CVE-2007-2156

Summary of CVE-2007-2156 (initial document): Rezervi Generic 0.9 contains multiple PHP remote file inclusion vulnerabilities. An attacker can trigger PHP code execution by supplying a URL in the root parameter to various scripts under templates/ (datumVonDatumBis.inc.php, footer.inc.php, header.i...