CVE-2006-3998

CVE-2006-3998 is a PHP remote file inclusion vulnerability in WoWRoster (World of Warcraft Roster) before or equal to version 1.5.1, arising from conf.php. An attacker can cause remote code execution by supplying a URL in the subdir parameter. The vulnerability is supported by NVD (CVSSv2 base sc...