CVE-2006-4230

Summary: CVE-2006-4230 describes multiple PHP remote file inclusion vulnerabilities in the Lizge V.20 Web Portal. The flaw resides in index.php, where an attacker can cause arbitrary PHP code execution by supplying a URL in the (1) lizge or (2) bade parameters. The NVD entry lists a base CVSS v2 ...