[SCSA-024] BES-CMS including file vulnerability

[Behrooz_Ice]

A vulnerability has been discovered in BES-CMS that allows remote attackers to cause the script to include arbitrary PHP code (allows remote command execution). Enjoy IT!