CVE-2007-2301

CVE-2007-2301 describes multiple PHP remote file inclusion vulnerabilities in audioCMS 0.1.4. The attacker can cause arbitrary PHP code execution by supplying a URL for the arashlib_dir parameter used by files in arash_lib/include (edit.inc.php and list_features.inc.php) and arash_lib/class/ (ara...