CVE-2007-5173

PHP remote file inclusion vulnerability in includes/openid/Auth/OpenID/BBStore.php in phpBB Openid 0.2.0 allows remote attackers to execute arbitrary PHP code via a URL in the openid_root_path parameter.

Date published : 2007-10-03

http://www.securityfocus.com/bid/25867

http://www.securityfocus.com/archive/1/481215/100/0/threaded