CVE-2006-2142

PHP remote file inclusion vulnerability in classes/adodbt/sql.php in Limbo CMS 1.04 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the classesdir parameter...

CVE-2006-2142

CVE-2006-2142 affects Limbo CMS (PHP) versions 1.04 and earlier. The vulnerability is a remote file inclusion in the classes_dir parameter of classes/adodbt/sql.php, where user-supplied input is used in include_once() without proper sanitization. This allows an attacker to cause arbitrary PHP cod...