PHP remote file inclusion vulnerability in cmpro_header.inc.php in Clan Manager Pro (CMPRO) 1.1 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the (1) cm_ext_server and (2) sitepath parameters.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Clan_manager_pro | Cmpro_team | 1.1 (including) | 1.1 (including) |