PHP remote file inclusion vulnerability in fonctions/template.php in EXlor 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the repphp parameter.Referenceshttp://securityreason.com/securityalert/2040http://www.securityfocus.com/archive/1/448689/100/0/threadedhttps://exchange.xforce.ibmcloud.com/vulnerabilities/29582