CVE-2007-6464

CVE-2007-6464 affects Form Tools 1.5.0b, where PHP remote file inclusion is exploitable via the g_root_dir parameter in global/templates/admin_page_open.php and global/templates/client_page_open.php. The root cause is insufficient validation of a user-supplied URL, enabling execution of arbitrary...