PHP remote file inclusion vulnerability in include/WBmap.php in WikyBlog 1.7.3 rc2 allows remote attackers to execute arbitrary PHP code via a URL in the langFile parameter.Referenceshttp://www.securityfocus.com/bid/38386https://exchange.xforce.ibmcloud.com/vulnerabilities/56519http://osvdb.org/62647http://www.exploit-db.com/exploits/11560http://packetstormsecurity.org/1002-exploits/wikyblog-rfishellxss.txt