CVE-2009-0103

CVE-2009-0103 describes multiple PHP remote file inclusion vulnerabilities in playSMS 0.9.3. The weakness allows remote attackers to execute arbitrary PHP code by supplying a crafted URL through one of three parameters: apps_path[plug] to plugin/gateway/gnokii/init.php, apps_path[themes] to plugi...