CVE-2007-4181

Pluck 4.3 is affected by a reported PHP remote file inclusion in data/inc/theme.php when register_globals is enabled, potentially allowing arbitrary PHP code execution via a dir parameter. The core dispute in the public records notes that the vulnerable include occurs inside a function that does ...