Revenge

The issue is a stack-based buffer overflow in the `pr ctrls recv request` function, located in the `ctrls.c` file of the `mod ctrls` module. This allows local users to execute arbitrary code by providing a large `reqarglen` length value.

The issue allows remote attackers to execute arbitrary SQL commands via the `pageid` parameter in index.php. This can also be leveraged for path disclosure with an invalid `pageid` parameter.

The issue allows remote authenticated administrators to include and execute arbitrary local files via a .. (dot dot) in the `f` parameter. This can be demonstrated by injecting PHP sequences into an Apache HTTP Server log file, which is then included by index.php.