CVE-2007-2774

Name of the Vulnerable Software and Affected Versions SunLight CMS version 5.3

Description The issue allows remote attackers to execute arbitrary PHP code. This can be achieved by providing a URL in the root parameter to specific PHP files, such as connect.php or modules/startup.php.

Recommendations For SunLight CMS version 5.3, consider restricting access to the connect.php and modules/startup.php files to minimize the risk of exploitation. As a temporary workaround, avoid using the root parameter in these files until a patch is available.