CVE-2007-1843

Affected software: MapLab 2.2.1, specifically gmapfactory/params.php. Root cause: when register_globals is enabled, PHP remote file inclusion occurs, allowing an attacker to execute arbitrary PHP code via a URL supplied in the gszAppPath parameter. Impact: arbitrary code execution with network ac...