CVE-2007-5089
PHP remote file inclusion vulnerability in php-inc/log.inc.php in sk.log 0.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the SKIN_URL parameter.
Date published : 2007-09-26
http://www.securityfocus.com/bid/25791
http://www.securityfocus.com/archive/1/480484/100/0/threaded