CVE-2007-3306

This exploit demonstrates a remote file inclusion vulnerability in MiniBill 1.2.5 by manipulating the 'config[include_dir]' parameter in 'run_billing.php' to include an arbitrary remote script. The vulnerability allows an attacker to execute arbitrary code on the target system.