CVE-2006-4189

Summary: BoonEx Dolphin 5.1 (and Dolphin 5.2 per related CVEs) is affected by PHP remote file inclusion via dir[inc] parameters in multiple scripts (e.g., index.php, aemodule.php, browse.php, cc.php, etc.). The underlying issue is improper inclusion of user-supplied URL input, enabling remote cod...

CVE-2006-4189: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Dolphin 5.1 allow remote attackers to execute arbitrary PHP code via a URL in the dirinc parameter in 1 index.php, 2 aemodule.php, 3 browse.php, 4 cc.php, 5 click.php, 6 faq.php, 7 gallery.php, 8 im.php, 9 inbox.php, 10 joinform.php, 11...