CVE-2006-4609

PHProjekt 0.6.1 is affected by multiple PHP remote file inclusion vulnerabilities tied to the Content Manager and register_globals being enabled. The CVE-2006-4609 entry cites six vectors using the path_pre parameter (cm_lib.inc.php, doc/br.edithelp.php, doc/de.edithelp.php, doc/ct.edithelp.php, ...