CVE-2006-2843

Redaxo 2.7.4 is affected by a PHP remote file inclusion vulnerability. The issue allows remote attackers to execute arbitrary PHP code by supplying a URL in the REX[INCLUDE_PATH] parameter used by addons/import_export/pages/index.inc.php and pages/community.inc.php. The root cause is unsafely inc...