CVE-2008-3167: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in BoonEx Dolphin 6.1.2, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 dirplugins parameter to a HTMLSax3.php and b safehtml.php in plugins/safehtml/ and the 2 sIncPath parameter to c...