CVE-2007-5418

CVE-2007-5418 documents multiple PHP remote file inclusion flaws in CARE2X versions (notably 1.1 and 2G 2.2) that allow an attacker to execute arbitrary PHP code. The vulnerability is triggered by supplying a URL in the root_path parameter to a set of PHP scripts across include/ and main/ directo...