CVE-2007-1766

CVE-2007-1766 concerns a PHP remote file inclusion in Advanced Login 0.76 and earlier. The vulnerability resides in login/engine/db/profiledit.php, where an attacker can inject a URL via the root parameter to execute arbitrary PHP code remotely. The issue yields full compromise of confidentiality...