← Database

CVE-2007-0135

MEDIUM CVSS: 6.8 Published: 2007-01-09 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in inc/init.inc.php in Aratix 0.2.2 beta 11 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the current_path parameter.

Affected Platforms

Aratix Aratix

Weakness Type

NVD-CWE-Other

References