CVE-2007-2596

CVE-2007-2596 is a PHP remote file inclusion vulnerability in aForum 1.32 and earlier. The issue arises from the CommonAbsDir parameter in common/func.php, allowing an attacker to supply a URL and execute arbitrary PHP code on the server. Documented impact includes remote code execution with part...

CVE-2007-2634

CVE-2007-2634 is a PHP remote file inclusion vulnerability affecting aForum 1.32 (and possibly earlier). The issue arises when register_globals is enabled, allowing an attacker to execute arbitrary PHP code by supplying a URL in the header parameter, via a remote PHP inclusion in common/errormsg....