PHP remote file inclusion vulnerability in ktmlpro/includes/ktedit/toolbar.php in gapicms 9.0.2 allows remote attackers to execute arbitrary PHP code via a URL in the dirDepth parameter.
- http://securityreason.com/securityalert/3998
- https://www.exploit-db.com/exploits/6036
No PoCs found on GitHub currently.