CVE-2007-6229

CVE-2007-6229 describes a PHP remote file inclusion in Rayzz Script 2.0. The vulnerability affects the file common/classes/class_HeaderHandler.lib.php and permits remote attackers to execute arbitrary PHP code by supplying a URL in the CFG[site][project_path] parameter. The NVD entry cites a CVSS...

CVE-2007-6230

CVE-2007-6230 describes a directory-traversal vulnerability in Rayzz Script 2.0, where an attacker can use ".." in CFG[site][project_path] to cause local file inclusion and execution via common/classes/class_HeaderHandler.lib.php. The CVSS metrics indicate network access with low complexity and n...