CVE-2007-5148

FrontAccounting (FA) path_to_root based PHP remote file inclusion is described against FA 1.12 in CVE-2007-5148 and is also echoed in related entries for FA 1.13 (CVE-2007-5117). The vulnerability allows remote attackers to execute arbitrary PHP code by supplying a URL in the path_to_root paramet...