← Database

CVE-2007-6324

MEDIUM CVSS: 6.8 Published: 2007-12-13 Modified: 2026-06-16

Description

PHP remote file inclusion vulnerability in head.php in CityWriter 0.9.7 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.

Affected Platforms

City Writer Citywriter

Weakness Type

CWE-94

References