CVE-2006-5399: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in classes/ImportMM.class.php in PHPRecipeBook 2.36, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the grbbasedir parameter...