CVE-2006-3478

CVE-2006-3478 is a PHP remote file inclusion vulnerability affecting MyPHP CMS 0.3 and earlier. The flaw resides in styles/default/global_header.php and is exploitable when register_globals is enabled, allowing remote attackers to execute arbitrary PHP code via a URL in the domain parameter. The ...