JAF CMS 4.0 RC2 Remote File Inclusion / Command Execution

===================================== Vulnerability ID: HTB22666 Reference: http://www.htbridge.ch/advisory/rfiinjafcms.html Product: JAF CMS Vendor: JAF CMS http://jaf-cms.sourceforge.net/ Vulnerable Version: 4.0 RC2 Vendor Notification: 21 October 2010 Vulnerability Type: Remote File Inclusion...