PHP remote file inclusion vulnerability in example/lib/grid3.lib.php in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the (1) cfg_dir and (2) lib_dir parameters.
https://www.exploit-db.com/exploits/2511
https://exchange.xforce.ibmcloud.com/vulnerabilities/29437
http://www.securityfocus.com/bid/20442