Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in Kravchuk letter K-letter 1.0 allow remote attackers to execute arbitrary PHP code via a URL in the scdir parameter to 1 action.php, 2 subs.php, or 3 unsubs.php...

CVE-2007-3118

CVE-2007-3118 affects Kravchuk letter (K-letter) 1.0. The vulnerability is a PHP remote file inclusion flaw in the scdir parameter used by action.php, subs.php, or unsubs.php, allowing an attacker to execute arbitrary PHP code. Root cause: unsafely constructed URL parameter enabling remote file i...