CVE-2009-4471: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in FreeSchool 1.1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CLASSPATH parameter to 1 bibform.php, 2 bibpldetails.php, 3 bibplform.php, 4 bibplsearchc.php, 5 bibplsearchs.php, 6 bibsave.php, 7...