CVE-2008-1416

CVE-2008-1416 : PHPAuction GPL 2.51 contains multiple remote file inclusion vulnerabilities in the includes/ files (converter.inc.php, messages.inc.php, settings.inc.php) that allow an attacker to execute arbitrary PHP code via a crafted include_path URL. Root cause is unsanitized include handlin...