CVE-2007-1976

CVE-2007-1976 describes a PHP remote file inclusion vulnerability in the Virii Info module for Xoops (versions 1.10 and earlier). An attacker could trigger arbitrary PHP code execution by supplying a crafted URL via the xoopsConfig[root_path] parameter in index.php. The issue is noted as being di...