CVE-2009-3365

CVE-2009-3365 affects Aurora CMS 1.0.2 and is triggered through a PHP remote file inclusion in the install.plugin.php of the sysmanager addon, via the AURORA_MODULES_FOLDER parameter. The underlying issue is a vulnerable inclusion mechanism that allows an attacker to execute arbitrary PHP code by...