[VIM] Sitellite CMS <= 4.2.12 (559668.php) Remote File Inclusion Vulnerability

[Steven M. Christey]

> FYI: milw0rm 4071 is sort of true -- the RFI flaw does exist, but by
> default there's a .htaccess file in saf/lib/PEAR/PhpDocumentor that
> prevents access to that directory tree.

Also note that at first glance, this might look like an issue in
PhpDocumentor, a separate module, which DOES have the bug-559668.php file;
however, it doesn't have the vulnerable FORUM[LIB] line, so this must have
been added by the Sitellite developer.

- Steve