CVE

Id
26710  
CVE No.
CVE-2007-3353  
Status
Candidate  
Description
** DISPUTED ** PHP remote file inclusion vulnerability in includes/template.php in MyEvent 1.6 allows remote attackers to execute arbitrary PHP code via a URL in the myevent_path parameter. NOTE: a reliable third party disputes this issue, saying "the entire file is a class."  
Phase
Assigned (20070622)  
Votes
None (candidate not yet proposed)  
Comments