CVE-2007-2311

PHP remote file inclusion vulnerability in install/index.php in BlooFoxCMS 0.2.2 allows remote attackers to execute arbitrary PHP code via a URL in the contentphp parameter. NOTE: this issue has been disputed by a reliable third party, stating that contentphp is initialized before use...

CVE-2007-2311

CVE-2007-2311 describes a PHP remote file inclusion in BlooFoxCMS 0.2.2, specifically in install/index.php, allowing an attacker to execute arbitrary PHP code via a URL placed in the content_php parameter. The root cause is the handling of user-controlled content_php leading to code execution; th...