CVE-2007-5053 Information

Description

Multiple incomplete blacklist vulnerabilities in iziContents 1 RC6 and earlier allow remote attackers to execute arbitrary PHP code via a URL in (1) the admin_home parameter to modules/poll/poll_summary.php or (2) the rootdp parameter to include/db.php; or a URL in the language_home parameter to (3) search/search.php (4) poll/inlinepoll.php (5) poll/showpoll.php (6) links/showlinks.php or (7) links/submit_links.php in modules/; related to missing checks in (a) modules/moduleSec.php and (b) include/includeSec.php for inclusion of certain URLs as demonstrated by an ftps:// URL.

Reference

https://www.exploit-db.com/exploits/4441