CVE-2006-4670

CVE-2006-4670 affects PhotoKorn Gallery 1.52 and earlier, with multiple PHP remote file inclusion vulnerabilities. The issue allows an attacker to cause arbitrary PHP code execution by supplying a crafted URL in the dir_path parameter of (1) includes/cart.inc.php or (2) extras/ext_cats.php. The r...