CVE-2009-4220

CVE-2009-4220 affects PointComma prior to 3.8b2. A PHP remote file inclusion vulnerability in includes/classes/pctemplate.php allows an attacker to execute arbitrary PHP code by supplying a URL in the pcConfig[smartyPath] parameter. This results in remote code execution with the attack vector bei...