CVE-2007-3118

CVE-2007-3118 affects Kravchuk letter (K-letter) 1.0. The vulnerability is a PHP remote file inclusion flaw in the scdir parameter used by action.php, subs.php, or unsubs.php, allowing an attacker to execute arbitrary PHP code. Root cause: unsafely constructed URL parameter enabling remote file i...