CVE-2008-6403

The CVE-2008-6403 issue affects OpenRat 0.8-beta4 and earlier, where a PHP remote file inclusion vulnerability in themes/default/include/html/insert.inc.php allows an attacker to execute arbitrary PHP code via a URL parameter (tpl_dir). The underlying cause is improper handling of the tpl_dir par...