CVE-2008-2396

The CVE-2008-2396 issue affects Wajox Software microSSys CMS 1.5 and earlier. A PHP remote file inclusion vulnerability exists in index.php when register_globals is enabled, allowing an attacker to execute arbitrary PHP code by supplying a URL in an element of the PAGES array parameter. The impac...