CVE-2009-4472

CVE-2009-4472 affects PHPope 1.0.0 and earlier. The vulnerability is due to multiple remote file inclusion weaknesses that allow an attacker to provide a crafted URL through specific GLOBALS[config][dir] parameters to PHPope’s plugins/address/admin/index.php, plugins/im/compose.php, and plugins/c...