Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PeopleAggregator 1.2pre6, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the currentblockmodulepath parameter to 1 AudiosMediaGalleryModule/AudiosMediaGalleryModule.php, 2...

CVE-2007-5631

Vulnerability summary (CVE-2007-5631) : In PeopleAggregator 1.2pre6, multiple PHP remote file inclusion flaws exist when PHP register_globals is enabled. An attacker can abuse the current_blockmodule_path parameter (and related path_prefix usage) to cause arbitrary PHP code execution via modules ...