PHP remote file inclusion vulnerability in quickie.php in Knusperleicht Quickie, probably 0.2, allows remote attackers to execute arbitrary PHP code via a URL in the QUICK_PATH parameter.
https://exchange.xforce.ibmcloud.com/vulnerabilities/28125
http://www.securityfocus.com/archive/1/441814/100/0/threaded