Security Advisory
CVE-2007-0150
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Multiple PHP remote file inclusion vulnerabilities in index.php in Dayfox Blog allow remote attackers to execute arbitrary PHP code via a URL in the (1) page, (2) subject, and (3) q parameters.