CVE-2012-5293

SAPID CMS 1.2.3 Stable is affected by multiple PHP remote file inclusion vulnerabilities that allow an attacker to execute arbitrary PHP code via a URL in the GLOBALS[root_path] (usr/extensions/get_tree.inc.php) or root_path (usr/extensions/get_infochannel.inc.php) parameters. The vulnerability e...