CVE-2006-4440

CVE-2006-4440 describes a PHP remote file inclusion vulnerability in Ay System Solutions CMS (main.php) versions 2.6 and earlier. The flaw allows remote attackers to execute arbitrary PHP code by supplying a URL in the path[ShowProcessHandle] parameter. The evidence is drawn from the NVD/CVE reco...