CVE-2006-5762: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in forgotpass.php in Free File Hosting 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter. NOTE: this issue was later reported for the "File Upload System" which is a component of Free File Hosting...

CVE-2006-5763: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Free File Hosting 1.1, and possibly earlier, when registerglobals is enabled, allow remote attackers to execute arbitrary PHP code via a URL in the ADBODYTEMP parameter to 1 login.php, 2 register.php, or 3 send.php. NOTE: the original provenan...