PHP remote file inclusion vulnerability in dbmodules/DB_adodb.class.php in PHP Object Framework (PHPOF) 20040226 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the PHPOF_INCLUDE_PATH parameter.
https://www.exploit-db.com/exploits/4363
https://exchange.xforce.ibmcloud.com/vulnerabilities/36439