Open Conference System < 1.1.6 Multiple Script fullpath Parameter Remote File Inclusion

The remote host is using Open Conference System, a PHP application for managing scholarly conference websites. The version of Open Conference System installed on the remote host fails to sanitize input to the 'fullpath' parameter before using it to include PHP code in the 'include/theme.inc.php'...