CVE-2008-4502

DataFeedFile (DFF) PHP Framework API is affected by CVE-2008-4502 via multiple PHP remote file inclusion vulnerabilities. The flaw arises from allowing a URL in DFF_config[dir_include] to be included by seven include/ files (DFF_affiliate_client_API.php, DFF_featured_prdt.func.php, DFF_mer.func.p...