PHP remote file inclusion vulnerability in index.php in Request It 1.0b allows remote attackers to execute arbitrary PHP code via a URL in the id parameter.
http://www.vupen.com/english/advisories/2007/1318
http://www.securityfocus.com/bid/23370
http://www.securityfocus.com/archive/1/465081/100/0/threaded
http://www.attrition.org/pipermail/vim/2007-April/001514.html
http://securityreason.com/securityalert/2553