Remote file inclusion

PHP remote file inclusion vulnerability in environment.php in AnyInventory 1.9.1 and 2.0, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the DIRPREFIX parameter...

CVE-2007-4744

Vulnerability summary (CVE-2007-4744) : A PHP remote file inclusion flaw in AnyInventory 1.9.1 and 2.0 enables an attacker to execute arbitrary PHP code when register_globals is on. The issue is triggered via a URL in the DIR_PREFIX parameter within environment.php, allowing remote code execution...