CVE-2007-5166

CVE-2007-5166 affects SiteSys 1.0a with multiple PHP remote file inclusion vulnerabilities. The issue allows an attacker to cause arbitrary PHP code execution by supplying a URL to the doc_root parameter for inc/pagehead.inc.php or inc/pageinit.inc.php. Root cause: unsanitized doc_root parameter ...