CVE-2007-1052

Name of the Vulnerable Software and Affected Versions: PBLang (PBL) versions 4.60 and earlier

Description: A remote file inclusion issue allows remote attackers to execute arbitrary PHP code via a URL in the dbpath parameter. This is a different attack vector.

Recommendations: For PBLang (PBL) versions 4.60 and earlier, avoid using the dbpath parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.