Security Advisory
CVE-2007-2544
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
PHP remote file inclusion vulnerability in templates/default/tpl_message.php in PHP TopTree BBS 2.0.1a and earlier allows remote attackers to execute arbitrary PHP code via a URL in the right_file parameter.