CVE-2008-6287

Broadcast Machine 0.1 is vulnerable to multiple PHP remote file inclusion (RFI) flaws in controllers/. The baseDir parameter in (1) MySQLController.php, (2) SQLController.php, (3) SetupController.php, (4) VideoController.php, and (5) ViewController.php can be abused to execute arbitrary PHP code ...