CVE-2007-2634

CVE-2007-2634 is a PHP remote file inclusion vulnerability affecting aForum 1.32 (and possibly earlier). The issue arises when register_globals is enabled, allowing an attacker to execute arbitrary PHP code by supplying a URL in the header parameter, via a remote PHP inclusion in common/errormsg....