The remote web server contains a PHP script that is affected by a remote file include issue. Description: The remote web server is running phpWebThings, a PHP based photo gallery management system. The version of phpWebThings installed on the remote host fails to sanitize input to the 'editor_insert_bottom' parameter before using it in the 'core/editor.php' script to include PHP code. Provided PHP's 'register_globals' setting is enabled, an unauthenticated attacker can exploit this issue to view arbitrary files and execute arbitrary code, possibly taken from third-party hosts, on the remote host.

No patches or upgrades have been reported by the vendor at this time.