Remote file inclusion

PHP remote file inclusion vulnerability in install.php in Somery 0.4.6 allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter, a different vector than CVE-2006-4669. NOTE: the documentation says to remove install.php after installation...

CVE-2006-4669

PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter...

CVE-2006-4669

The CVE-2006-4669 entry describes a PHP remote file inclusion vulnerability in Somery 0.4.6 and earlier. Specifically, when register_globals is enabled, an attacker can craft a URL to the skindir parameter in admin/system/include.php to execute arbitrary PHP code on the affected system. The vulne...