CVE-2009-0701: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in index.php in Cybershade CMS 0.2b, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the 1 THEMEheader and 2 THEMEfooter parameters...