CVE-2008-4502: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in DataFeedFile DFF PHP Framework API allow remote attackers to execute arbitrary PHP code via a URL in the DFFconfigdirinclude parameter to 1 DFFaffiliateclientAPI.php, 2 DFFfeaturedprdt.func.php, 3 DFFmer.func.php, 4 DFFmerprdt.func.php, 5...