CVE-2006-4848

Hitweb 3.0 is affected by PHP remote file inclusion vulnerabilities allowing an attacker to cause arbitrary PHP code execution by supplying a URL in the REP_CLASS parameter to a set of PHP files (index.php, arbo.php, framepoint.php, genpage.php, lienvalider.php, appreciation.php, partenariat.php,...