CVE-2009-3323: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini BAROSmini 0.32.595 allow remote attackers to execute arbitrary PHP code via a URL in the barospath parameter to 1 include/commonfunctions.php, and the mainpath parameter to 2 libusers.php, 3 libstats.php, and 4...