CVE-2009-3492

Loggix Project up to version 9.4.5 is affected by Multiple PHP remote file inclusion vulnerabilities . An attacker can provide a URL in the pathToIndex parameter to (1) Calendar.php, (2) Comment.php, (3) Rss.php, (4) Trackback.php in lib/Loggix/Module/, and (5) modules/downloads/lib/LM_Downloads....