CVE-2008-3127

CVE-2008-3127 concerns a PHP remote file inclusion in the HIOX Banner Rotator (HBR) version 1.3. The flaw occurs in hioxBannerRotate.php and is exploitable when register_globals is enabled, allowing an attacker to supply a URL in the hm parameter to cause arbitrary PHP code execution on the affec...