2005-06-07 04:00:00
mitre
PUBLISHED
global.php in YaPiG 0.92b allows remote attackers to include arbitrary local files via the BASE_DIR parameter.