CVE-2007-3315

CVE-2007-3315 describes multiple PHP remote file inclusion vulnerabilities in YourFreeScreamer 1.0. When register_globals is enabled, an attacker can cause arbitrary PHP code execution by supplying a URL in the serverPath parameter to bodyTemplate.php within the templates/Classic/, templates/Clas...