CVE-2007-2743

PHP remote file inclusion vulnerability in customvars.php in GlossWord 1.8.1 allows remote attackers to execute arbitrary PHP code via a URL in the syspathaddon parameter...

CVE-2007-2743

CVE-2007-2743 affects GlossWord 1.8.1 via a PHP remote file inclusion in custom_vars.php. An attacker can cause arbitrary PHP code execution by supplying a crafted URL in the sys[path_addon] parameter. The vulnerability is triggered through a user-controlled URL, enabling code execution on the af...

CVE-2007-2743

PHP remote file inclusion vulnerability in customvars.php in GlossWord 1.8.1 allows remote attackers to execute arbitrary PHP code via a URL in the syspathaddon parameter...