CVE-2007-5096 Information

Description

PHP remote file inclusion vulnerability in modules/webmail2/inc/rfc822.php in guanxiCRM Business Solution 0.9.1 allows remote attackers to execute arbitrary PHP code via a URL in the webmail2_inc_dir parameter.

Reference

http://arfis.wordpress.com/2007/09/14/rfi-02-guanxicrm-business-solution/ http://osvdb.org/38575