PHP remote file inclusion vulnerability in extras/mt.php in Jinzora 2.6 allows remote attackers to execute arbitrary PHP code via the web_root parameter.Referenceshttp://securityreason.com/securityalert/2352https://www.exploit-db.com/exploits/2558https://exchange.xforce.ibmcloud.com/vulnerabilities/29556http://www.securityfocus.com/archive/1/448703/100/0/threaded
