CVE-2008-3207

CVE-2008-3207 affects Pragyan CMS 2.6.2 and enables PHP remote file inclusion when register_globals is enabled. The vulnerability lives in cms/modules/form.lib.php and allows an attacker to execute arbitrary PHP code by supplying a URL in either the sourceFolder or moduleFolder parameters. Public...