Remote file inclusion

PHP remote file inclusion vulnerability in lib/headauth.php in GROUP-E 1.6.41 allows remote attackers to execute arbitrary PHP code via a URL in the CFGPREPENDFILE parameter...