CVE-2006-3966

CVE-2006-3966 affects the PHP Layers Menu 2.3.5 package for MyNewsGroups :) (versions up to and including 0.6b). A PHP remote file inclusion in /lib/tree/layersmenu.inc.php allows an attacker to supply a URL via the myng_root parameter to execute arbitrary PHP code on the affected system. The CP ...