Remote Code Execution in ezContents

Summary
ezContents is an Open-Source website content management system based on PHP and MySQL. Features include maintaining menus and sub-menus, adding authors that write contents, permissions, workflow, and layout possibilities for the entire look of the site by simple use of settings. The product has been found to contain a vulnerability that would allow a remote attacker to cause the PHP script to include an external PHP file and execute its content. This would allow an attacker to cause the server to execute arbitrary code.