CVE-2006-2864

CVE-2006-2864 describes multiple PHP remote file inclusion vulnerabilities in BlueShoes Framework 4.6 and earlier. An attacker could trigger arbitrary PHP code execution by supplying a URL through several APP[path] and GLOBALS[APP][path] parameters to files such as Bs_Faq.class.php, fileBrowserIn...