CVE-2008-2877

CVE-2008-2877 affects cmsWorks 2.2 RC4, where a PHP remote file inclusion vulnerability exists in admin/include/lib.module.php. When register_globals is enabled, an attacker can supply a URL in the mod_root parameter to execute arbitrary PHP code. The entry lists a CVSSv2 base score of 6.8 (MEDIU...