CVE-2006-2921

PHP remote file inclusion vulnerability in cmproheader.inc.php in Clan Manager Pro CMPRO 1.1 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the 1 cmextserver and 2 sitepath parameters...

CVE-2006-2921

CVE-2006-2921 affects Clan Manager Pro (CMPRO) 1.1 and earlier. The vulnerability is a PHP remote file inclusion in cmpro_header.inc.php when register_globals is enabled, enabling an attacker to run arbitrary PHP code via a URL in the (1) cm_ext_server and (2) sitepath parameters. The provided do...