CVE-2006-3991

CVE-2006-3991 is a PHP remote file inclusion vulnerability affecting Vlad Vostrykh Voodoo chat 1.0RC1b and earlier, allowing a remote attacker to execute arbitrary PHP code via the file_path parameter in index.php. The root cause is unvalidated user input in the file_path parameter leading to rem...