CVE-2006-2523

PHP remote file inclusion vulnerability in config.php in phpListPro 2.0.1 and earlier, with magicquotesgpc disabled, allows remote attackers to execute arbitrary PHP code via a URL in the Language cookie...

CVE-2006-2523

The CVE-2006-2523 entry details a PHP remote file inclusion in phpListPro 2.0.1 and earlier, caused by improper handling of the Language cookie when magic_quotes_gpc is disabled. This allows an attacker to execute arbitrary PHP code by providing a malicious URL in the Language cookie. The affecte...