CVE-2007-2273

PHP remote file inclusion vulnerability in include/loading.php in Alessandro Lulli wavewoo 0.1.1 allows remote attackers to execute arbitrary PHP code via a URL in the pathinclude parameter...

CVE-2007-2273

CVE-2007-2273 describes a PHP remote file inclusion in the WaveWoo 0.1.1 application. The issue exists in include/loading.php where an untrusted URL supplied via the path_include parameter can cause the application to include and execute arbitrary PHP code from an attacker-controlled location. Af...