CVE-2007-0359

CVE-2007-0359 concerns Uberghey CMS 0.3.1 and its frontpage.php, where a remote file inclusion (RFI) via the setup_folder parameter allows an attacker to execute arbitrary PHP code. The root cause is improper handling of the setup_folder URL parameter, enabling an attacker-controlled file inclusi...