CVE-2006-3562

CVE-2006-3562 describes a PHP remote file inclusion vulnerability in Plume CMS 1.0.4 that allows a remote attacker to execute arbitrary PHP code by supplying a URL in the _PX_config[manager_path] parameter to one of three scripts (index.php, rss.php, or search.php). The issue is tied to Plume CMS...