CVE-2009-3324

CVE-2009-3324 describes a PHP remote file inclusion in include/prodler.class.php affecting ProdLer 2.0 and earlier. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a URL in the sPath parameter, enabling remote code execution with a network attack vector and no auth...