CVE-2010-2137

CVE-2010-2137 describes a PHP remote file inclusion in ProMan 0.1.1 and earlier, where an attacker can cause arbitrary PHP code execution by supplying a URL in the page parameter to _center.php. The vulnerability arises from improper handling of the page parameter, enabling remote code inclusion....