CVE-2007-2166

OpenSurveyPilot (osp) 1.2.1 and earlier is affected by CVE-2007-2166: a PHP remote file inclusion in administration/user/lib/group.inc.php allows an attacker to execute arbitrary PHP code via a URL in the cfgPathToProjectAdmin parameter. The issue is tied to osp versions before or equal to 1.2.1....