CVE-2008-2520

CVE-2008-2520 affects BigACE 2.4 and describes multiple PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code via manipulated GLOBALS[_BIGACE] parameters in several files (e.g., addon/smarty/plugins/function.captcha.php, AdoDBConnection.php, item_informati...