CVE-2007-2411

Affected software: Sphider 1.2.x. Vulnerability: PHP remote file inclusion via index.php, using include_dir parameter to execute arbitrary PHP code. Root cause: remote inclusion in include_dir path. Impact: potential remote code execution with partial confidentiality/integrity/availability implic...