CVE-2007-2327
PHP remote file inclusion vulnerability in _editor.php in HTMLeditbox 2.2 allows remote attackers to execute arbitrary PHP code via a URL in the settings[app_dir] parameter.
Date published : 2007-04-26
http://www.securityfocus.com/bid/23664
http://www.securityfocus.com/archive/1/466841/100/0/threaded