CVE-2006-2872

CVE-2006-2872 describes a PHP remote file inclusion in the web app Rumble 1.02 where an attacker can pass a URL in the configArr[pathtodir] parameter to config.php and cause arbitrary PHP code execution. The vulnerability is triggered remotely and can affect any affected deployment that uses the ...

CVE-2006-2872

PHP remote file inclusion vulnerability in config.php in Rumble 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the configArrpathtodir parameter...