CVE-2007-4329

CVE-2007-4329 concerns Web News 1.1, where multiple PHP remote file inclusion vulnerabilities allow an attacker to execute arbitrary PHP code by passing a URL in the config[root_ordner] parameter to one of three scripts: index.php, news.php, or feed.php. The source of the flaw is a lack of proper...