CVE-2008-4735: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in header.php in Concord Asset, Software, and Ticket system CoAST 0.95 allows remote attackers to execute arbitrary PHP code via a URL in the sectionsfile parameter...