CVE-2007-3325

CVE-2007-3325 describes a PHP remote file inclusion vulnerability in LMS (LAN Management System) versions 1.9.6 and earlier. The flaw resides in lib/language.php, where an attacker can cause arbitrary PHP code execution by supplying a malicious URL via the _LIB_DIR parameter (a vector distinct fr...