CVE-2006-4026

This CVE affects SAPID CMS 123 rc3 with a PHP remote file inclusion vulnerability. An attacker can cause arbitrary PHP code execution by supplying a URL in the (1) root_path parameter in usr/extensions/get_infochannel.inc.php or the (2) GLOBALS["root_path"] parameter in usr/extensions/get_tree.in...