CVE-2006-2528

CVE-2006-2528 affects phpBazar 2.1.0 and earlier, where a vulnerability in classified_right.php allows remote attackers to execute arbitrary PHP code via a URL supplied to the language_dir parameter (PHP remote file inclusion). The issue is caused by insufficient validation of the language_dir in...