CVE-2006-6867

CVE-2006-6867 documents multiple PHP remote file inclusion vulnerabilities in Vladimir Menshakov’s buratinable templator (aka bubla) 0.9.1, allowing an attacker to execute arbitrary PHP code via a URL in the bu_dir parameter to bu/bu_claro.php, bu/bu_cache.php, or bu/bu_parse.php. This differs fr...