CVE-2008-3399: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in activities/workflow-activities.php in XRMS CRM 1.99.2, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the includedirectory parameter...