CVE-2006-4236

The CVE-2006-4236 entry describes multiple PHP remote file inclusion vulnerabilities in POWERGAP. An attacker can craft a URL using the shopid parameter (to s01.php, s02.php, s03.php, or s04.php) or manipulate PATH_INFO after shopid= or sid= to cause arbitrary PHP code execution on affected POWER...