CVE-2007-2544: Undefined Security Weakness

PHP remote file inclusion vulnerability in templates/default/tplmessage.php in PHP TopTree BBS 2.0.1a and earlier allows remote attackers to execute arbitrary PHP code via a URL in the rightfile parameter...