CVE-2006-2002

The CVE-2006-2002 issue affects MyGamingLadder 7.0, specifically the stats.php script. A remote file inclusion flaw allows an attacker to supply a URL via the dir[base] parameter, enabling arbitrary PHP code execution on the server. The vulnerability is rooted in unsafely including user-controlle...

CVE-2006-2002

PHP remote file inclusion vulnerability in stats.php in MyGamingLadder 7.0 allows remote attackers to execute arbitrary PHP code via a URL in the dirbase parameter...