CVE-2009-2769

CVE-2009-2769 is a PHP remote file inclusion vulnerability in Ultrize TimeSheet 1.2.2. When register_globals is enabled, an attacker can cause arbitrary PHP code execution by supplying a URL in the config[include_dir] parameter within include/timesheet.php. The issue arises from improper handling...