CVE-2008-5922

Multiple PHP remote file inclusion vulnerabilities in themes/default/index.php in Cant Find A Gaming CMS CFAGCMS 1 allow remote attackers to execute arbitrary PHP code via a URL in the 1 main and 2 right parameters...

CVE-2008-5922

CVE-2008-5922 affects Cant Find A Gaming CMS (CFAGCMS) 1.0 and targets the themes/default/index.php file. It enables a remote file inclusion via the (1) main and (2) right parameters, allowing an attacker to execute arbitrary PHP code. The root cause is PHP RFI in the affected script. Public expl...