Remote file inclusion

PHP remote file inclusion vulnerability in admin/include/lib.module.php in cmsWorks 2.2 RC4, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the modroot parameter...

CVE-2008-2877

CVE-2008-2877 affects cmsWorks 2.2 RC4, where a PHP remote file inclusion vulnerability exists in admin/include/lib.module.php. When register_globals is enabled, an attacker can supply a URL in the mod_root parameter to execute arbitrary PHP code. The entry lists a CVSSv2 base score of 6.8 (MEDIU...