CVE-2007-2298

Garennes 0.6.1 and earlier contain multiple PHP remote file inclusion vulnerabilities. An attacker can cause arbitrary PHP code execution by supplying a URL in the repertoire_config parameter to index.php, targeting directories (cpe/, direction/, professeurs/). The issue is documented across seve...