CVE-2007-1415 – PMB Services 3.0.13 - Multiple Remote File Inclusions

https://notcve.org/view.php?id=CVE-2007-1415

12 Mar 2007 — Multiple PHP remote file inclusion vulnerabilities in PMB Services 3.0.13 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) class_path parameter to (a) includes/resa_func.inc.php (b) admin/notices/perso.inc.php, or (c) admin/quotas/main.inc.php; the (2) base_path parameter to (d) opac_css/rec_panier.php or (e) opac_css/includes/author_see.inc.php; or the (3) include_path parameter to (f) bull_info.inc.php or (g) misc.inc.php in includes/; (h) options_date_box.php, (i) opt... • https://www.exploit-db.com/exploits/3443 • CWE-94: Improper Control of Generation of Code ('Code Injection') •