CVE-2010-1266: Improper Control of Generation of Code

Multiple PHP remote file inclusion vulnerabilities in WebMaid CMS 0.2-6 Beta and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 template, 2 menu, 3 events, and 4 SITEROOT parameters to template/babyweb/index.php; the 5 modules and 6 copyright parameters to...