CVE-2007-6289: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in SerWeb 2.0.0 dev1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 SERWEBconfigdir parameter to loadlang.php, 2 SERWEBfunctionsdir parameter to mainprepend.php, and the 3 PHPLIBlibdir parameter to...