CVE-2007-5599

CVE-2007-5599 affects awrate 1.0 with multiple PHP remote file inclusion (RFI) vulnerabilities. The issue allows remote attackers to execute arbitrary PHP code by supplying a URL in the toroot parameter used by (1) 404.php or (2) topbar.php, representing vectors distinct from CVE-2006-6368. The r...