CVE-2008-3402: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in HIOX Browser Statistics HBS 2.0 allow remote attackers to execute arbitrary PHP code via a URL in the hm parameter to 1 hioxupdate.php and 2 hioxstats.php...