From: "Peter Stöckli" <pcs (at) rootquest (dot) com [email concealed]>
...
> -Proof of concept-
> It is possible to include any php file from a remote host, and execute
> it on the target's server.

Thanks for the alert. It's disappointing that you made absolutely
no effort to contact us before announcing this vulnerability.
E...

[ more ]