CVE-2007-2328

Affected software/variant: phpMYTGP 1.4b. Vulnerability type: PHP remote file inclusion in addvip.php. Root cause: unchecked/malicious URL input via msetstr[PROGSDIR] leads to arbitrary PHP code execution. Impact (as stated): arbitrary code execution possible; CVSS base factors include high impac...