CVE-2007-2544

The CVE-2007-2544 entry affects PHP TopTree BBS versions up to 2.0.1a, with a remote file inclusion in templates/default/tpl_message.php. The underlying issue allows an attacker to supply a URL in the right_file parameter and cause the application to execute remote PHP code, enabling arbitrary co...