PHP remote file inclusion vulnerability in index.php in MiniBB Forum 2 allows remote attackers to execute arbitrary code via a URL in the pathToFiles parameter.Referenceshttp://securityreason.com/securityalert/2371https://exchange.xforce.ibmcloud.com/vulnerabilities/30253http://www.securityfocus.com/archive/1/451402/100/0/threaded