CVE-2007-3289

CVE-2007-3289 is a PHP remote file inclusion vulnerability affecting the WiwiMod 0.4 module for XOOPS, in which an attacker can execute arbitrary PHP code by supplying a URL in the spaw_root parameter of spaw/spaw_control.class.php. The issue is noted as probably a duplicate of CVE-2006-4656. The...