CVE-2006-4424

CVE-2006-4424 is a PHP remote file inclusion vulnerability in phpCOIN 1.2.3. The flaw lies in coin_includes/constants.php where user-supplied _CCFG[_PKG_PATH_INCL] can cause the application to include arbitrary PHP code, enabling an attacker to execute code on the server. Affected component/issue...