CVE-2007-5298

CVE-2007-5298 describes multiple PHP remote file inclusion vulnerabilities in the CMS Creamotion. The flaw allows remote attackers to execute arbitrary PHP code by supplying a crafted URL in the cfg[document_uri] parameter to two admin scripts: _administration/securite.php and _administration/ges...