CVE-2006-4007

The CVE-2006-4007 entry documents a PHP Remote File Inclusion vulnerability in Knusperleicht Guestbook 3.5, allowing an attacker to execute arbitrary PHP code by supplying a crafted URL in the GB_PATH parameter of index.php. The vulnerability originates from user-controlled input used in file inc...