CVE-2008-3127: Improper Input Validation

PHP remote file inclusion vulnerability in hioxBannerRotate.php in HIOX Banner Rotator HBR 1.3, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter...