CVE-2007-1118: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in eFiction 3.1.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the pathtosmf parameter to 1 bridges/SMF/logout.php or 2 getsessionvars.php...

eFiction <= 3.1.1 (path_to_smf) Remote File Include Vulnerabilities

Exploit for unknown platform in category web applications =================================================================== eFiction logout.php:- includeonce$pathtosmf."Sources/Subs-Auth.php"; getsessionvars.php:- requireonce$pathtosmf."SSI.php";...