CVE-2007-2424

CVE-2007-2424 describes a PHP remote file inclusion vulnerability in help/index.php of The Merchant (themerchant) 2.2. The issue allows an attacker to cause arbitrary PHP code execution by supplying a URL in the show parameter. The available connected documents confirm the affected software and t...