PHP remote file inclusion vulnerability in modules/Forums/favorites.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary PHP code via a URL in the nuke_bb_root_path parameter.Referenceshttps://www.exploit-db.com/exploits/4563http://www.securityfocus.com/bid/26183https://exchange.xforce.ibmcloud.com/vulnerabilities/37387