[SA18803] DocMGR process.php File Inclusion Vulnerability

DocMGR process.php File Inclusion Vulnerability. Highly critical. Exposure of sensitive information, System access. Input passed to "includeModule" and "siteModInfo" parameters in "/modules/center/admin/accounts/process.php" isn't properly verified, before it is used to include files. Exploitation requires "register_globals" enabled, "magic_quotes_gpc" disabled, and it is possible on PHP 5 by hosting the malicious file on a FTP server. Vulnerability reported in version 0.54.2. Solution is to edit the source code to ensure that input is properly sanitized