CVE

Id
26131  
CVE No.
CVE-2007-2774  
Status
Candidate  
Description
Multiple PHP remote file inclusion vulnerabilities in SunLight CMS 5.3 allow remote attackers to execute arbitrary PHP code via a URL in the root parameter to (1) _connect.php or (2) modules/startup.php.  
Phase
Assigned (20070521)  
Votes
None (candidate not yet proposed)  
Comments