CVE-2007-1790: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in Kaqoo Auction Software Free Edition allow remote attackers to execute arbitrary PHP code via a URL in the installroot parameter to 1 support.inc.php, 2 function.inc.php, 3 rdalobject.inc.php, 4 rdaleditor.inc.php. 5 login.inc.php, 6...