Squery libpath Parameter PHP Code Execution - Ver2 (CVE-2006-1610)

A code execution vulnerability has been reported in Squery. An attacker could exploit this vulnerability via a URL in the libpath parameter. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2006-1610

CVE-2006-1610 is a PHP remote file inclusion vulnerability affecting SQuery 4.5 and earlier. The issue resides in lib/armygame.php where a URL supplied to the libpath parameter allows an attacker to execute arbitrary PHP code when register_globals is disabled. Affected software is used in product...