CVE-2009-0530

CVE-2009-0530: The vulnerability lies in SnippetMaster 2.2.2 where remote file inclusion is possible when PHP register_globals is enabled. An attacker can cause arbitrary PHP code execution by supplying a URL through (1) _SESSION[SCRIPT_PATH] to includes/vars.inc.php and (2) g_pcltar_lib_dir to i...