PHP remote file inclusion vulnerability in data/header.php in CMS Faethon 1.3.2 allows remote attackers to execute arbitrary PHP code via a URL in the mainpath parameter.
- http://securityreason.com/securityalert/1127
No PoCs found on GitHub currently.