Multiple PHP remote file inclusion vulnerabilities in phpRaid 3.0.5 allow remote attackers to execute arbitrary code via a URL in the phpraid_dir parameter to (1) logs.php and (2) users.php, a different set of vectors than CVE-2006-3116.
https://exchange.xforce.ibmcloud.com/vulnerabilities/27465
http://www.securityfocus.com/bid/18719