Phormation PHP script 0.9.1 and earlier allows remote attackers to execute arbitrary code by including files from remote web sites, using an HTTP request that modifies the phormationdir variable.
| Software | From | Fixed in |
|---|---|---|
| peaceworks_computer_consulting / phormation | - | 0.9.1.x |