Security Advisory
CVE-2007-1059
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
PHP remote file inclusion vulnerability in function.php in Ultimate Fun Book 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the gbpfad parameter. NOTE: some sources mention "Ultimate Fun Board," but this appears to be an error.