EUVD-2007-5692

Malware in sbrugna...

CVE-2007-5721: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in theme/breadcrumb.php in MySpacePros MySpace Resource Script MSRS 1.21 allows remote attackers to execute arbitrary PHP code via a URL in the rootBase parameter...