Multiple PHP remote file inclusion vulnerabilities in my little forum 1.7 allow remote attackers to execute arbitrary PHP code via a URL in the lang parameter to (1) admin.php and (2) timedifference.php.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| My_little_forum | My_little_homepage | 1.7 (including) | 1.7 (including) |