PHP remote file inclusion vulnerability in engine/require.php in Docmint 2.0 and earlier when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the MY_ENVBASE_ENGINE_LOC parameter.