Remote file inclusion

Multiple PHP remote file inclusion vulnerabilities in PMECMS 1.0 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the configpathMod parameter to index.php in 1 mod/image/, 2 mod/liens/, 3 mod/liste/, 4 mod/special/, or 5 mod/texte/...