CVE-2005-1870
PHP remote file inclusion vulnerability in childwindow.inc.php in Popper 1.41-r2 and earlier allows remote attackers to execute arbitrary PHP code via the form parameter.
Date published : 2005-06-07
http://lists.grok.org.uk/pipermail/full-disclosure/2005-June/034408.html