CVE

Id
24061  
CVE No.
CVE-2007-0704  
Status
Candidate  
Description
PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669. NOTE: the documentation says to remove install.php after installation.  
Phase
Assigned (20070203)  
Votes
None (candidate not yet proposed)  
Comments