CVE-2007-2254

CVE-2007-2254 affects PHP Classifieds 6.04 (admin/setup/level2.php). The vulnerability is a PHP remote file inclusion that allows an attacker to execute arbitrary PHP code via a URL supplied to the dir parameter, indicating a remote code execution path. Root cause is improper handling of the dir ...