WikkiTikkiTavi < 0.21 - Remote File Inclusion via TemplateDir Parameter
PHP remote file inclusion vulnerability in WikkiTikkiTavi before 0.21 allows remote attackers to execute arbitrary PHP code via the TemplateDir variable, as demonstrated using conflict.php.