CVE-2007-4320

Name of the Vulnerable Software and Affected Versions Ncaster version 1.7.2

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the adminfolder parameter in the admin/addons/archive/archive.php file.

Recommendations For Ncaster version 1.7.2, consider restricting access to the admin/addons/archive/archive.php file until a patch is available. As a temporary workaround, avoid using the adminfolder parameter in the affected file to minimize the risk of exploitation.