CVE-2008-3354

CVE-2008-3354 concerns RunCMS 1.6.1 with the Newbb Plus 0.93 module, where multiple PHP remote file inclusion vulnerabilities allow an attacker to execute arbitrary PHP code. Specifically, the flaw is triggered by supplying a URL in the bbPath[path] parameter to votepolls.php and in the bbPath[ro...