Description
PHP remote file inclusion vulnerability in espaces/communiques/annotations.php in C-Arbre 0.6PR7 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the root_path parameter, a different vector than CVE-2007-1721.
References
- 20070422 c-arbre <= Multiple Remote File Include Vulnerablitiy mailing-list
- 2625 third-party-advisory
- carbre-annotations-file-include(33816) vdb-entry
- 35635 vdb-entry