CVE-2006-2315

ISPConfig 2.2.2 and earlier is listed as vulnerable to a PHP remote file inclusion via the go_info[server][classes_root] parameter in session.inc.php. The underlying issue is aRemote file inclusion that could allow execution of arbitrary PHP code. However, vendor dispute notes that session.inc.ph...