CVE-2006-1784

PHP remote file inclusion vulnerability in admin/configset.php in Sphider 1.3 and earlier, when registerglobals is disabled, allows remote attackers to execute arbitrary PHP code via a URL in the settingsdir parameter...

CVE-2006-1784

CVE-2006-1784 affects Sphider up to version 1.3. The issue is a PHP remote file inclusion in admin/configset.php via the settings_dir parameter, allowing arbitrary PHP code execution under specific PHP configurations (notably related to register_globals). The problem is triggered when user input ...