PHP remote file inclusion vulnerability in php121db.php in osDate 2.0.8 and possibly earlier versions allows remote attackers to execute arbitrary PHP code via a URL in the php121dir parameter.Referenceshttp://packetstormsecurity.org/0801-exploits/osdata-lfi.txthttp://secunia.com/advisories/28420https://exchange.xforce.ibmcloud.com/vulnerabilities/39567https://www.exploit-db.com/exploits/4870http://www.securityfocus.com/bid/27208
