CVE-2006-3266

Bee-hive Lite 1.2 and earlier is affected by multiple PHP remote file inclusion vulnerabilities when register_globals is enabled. The weaknesses allow an attacker to execute arbitrary PHP code by supplying URLs in various parameters across several scripts, including header, mysqlCall, mysqlcall, ...