CVE-2010-1299

DynPG CMS 4.1.0 (and potentially earlier) is affected by multiple PHP remote file inclusion vulnerabilities when magic_quotes_gpc is disabled and register_globals is enabled. An attacker can trigger arbitrary PHP code execution via three URLs parameterized vectors: DefineRootToTool in counter.php...