CVE-2006-2682: Undefined Security Weakness

PHP remote file inclusion vulnerability in BEconfig.php in Back-End CMS 0.7.2.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PSLclassdir parameter...