PHP remote file inclusion vulnerability in function.php in arabhost allows remote attackers to execute arbitrary PHP code via a URL in the adminfolder parameter.Referenceshttp://attrition.org/pipermail/vim/2007-February/001396.htmlhttp://securityreason.com/securityalert/2339http://www.securityfocus.com/archive/1/460933/100/0/threadedhttp://osvdb.org/33839