CVE-2006-2982

EPS (Enterprise Timesheet and Payroll Systems) 1.1 and earlier suffer PHP remote file inclusion via the absolutepath parameter in footer.php and admin/footer.php, allowing remote code execution. Root cause: improper handling of user-supplied URLs in these PHP files. Affected components: footer.ph...