CVE-2010-1360

Multiple PHP remote file inclusion vulnerabilities in FAQEngine 4.24.00 allow remote attackers to execute arbitrary PHP code via a URL in the pathfaqe parameter to 1 attachs.php, 2 backup.php, 3 badwords.php, 4 categories.php, 5 changepw.php, 6 colorchooser.php, 7 colorwheel.php, 8 dbfiles.php, 9...