CVE-2007-5185: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in phpWCMS XT 0.0.7 BETA and earlier allow remote attackers to execute arbitrary PHP code via a URL in the HTMLMENUDirPath parameter to 1 configHTMLMENU.php and 2 configPHPLM.php in phpwcmstemplate/incscript/frontendrender/navigation/...

phpwcms-rfi.txt

?????????? ??????????????? ??????????????????? ??????????????????????? ?????????????????????????? ?????????????????????????????? ????????????????????????????????? ??????????????????????????????????? ????????????????????????????????????? ???????????????????????????????????????...