CVE-2006-4011

Kayako eSupport vulnerable to PHP remote file inclusion (CVE-2006-4011) in esupport/admin/autoclose.php for 2.3.1 and earlier when register_globals is enabled. An attacker can specify a URL in the subd parameter to execute arbitrary PHP code. Affected product/version: Kayako eSupport 2.3.1 and ea...