CVE-2007-5168

CVE-2007-5168 describes multiple PHP remote file inclusion vulnerabilities in ClanLite 1.23.01.2005. An attacker can execute arbitrary PHP code by supplying a URL in the root_path parameter to either modules/serveur_jeux.php or conf/conf-php.php. The entry notes that vector 1 is disputed because ...