CVE-2009-3323

Multiple PHP remote file inclusion vulnerabilities in BAnner ROtation System mini BAROSmini 0.32.595 allow remote attackers to execute arbitrary PHP code via a URL in the barospath parameter to 1 include/commonfunctions.php, and the mainpath parameter to 2 libusers.php, 3 libstats.php, and 4...