Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in 1 eday.php, 2 eshow.php, or 3 forgot.php in albinator 2.0.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the Configrootdir parameter...