CVE-2008-2888: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in MiGCMS 2.0.5, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALSapplicationapproot parameter to 1 collection.class.php and 2 contentimage.class.php in lib/obj/...