CVE-2008-4720: Multiple PHP remote file inclusion vulnerabilities in The Gemini Portal 4.7 allow remote attackers to execute arbitrary

CVE-2008-4720 is a remote file inclusion vulnerability (a type of code injection flaw where an attacker tricks a website into loading and running code from a URL they control) found in The Gemini Portal version 4.7. Attackers could exploit this by injecting a malicious URL into the 'lang' parameter of two specific files, allowing them to execute arbitrary PHP code (custom commands) on the affected server.