CVE-2006-4213

PHP remote file inclusion vulnerability in config.php in David Kent Norman Thatware 0.4.6 and possibly earlier allows remote attackers to execute arbitrary PHP code via a URL in the rootpath parameter...

CVE-2006-4213

CVE-2006-4213 describes a PHP remote file inclusion vulnerability in David Kent Norman Thatware 0.4.6 (and possibly earlier). The root_path parameter can be set to an attacker-controlled URL, enabling remote PHP code execution. The connected documents confirm the root cause and impact as partial ...