Headline Portal Engine 0.x/1.0 - 'HPEInc' Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/19663/info Multiple remote file-include vulnerabilities affect HPE because the application fails to properly sanitize user-supplied input before using it in a PHP 'include' function call. An attacker may leverage these issues to execute arbitrary...