CVE-2006-4738

CVE-2006-4738 describes a PHP remote file inclusion in Jetbox CMS, specifically in phpthumb.php, allowing an attacker to execute arbitrary PHP code via a URL supplied to the includes_path parameter. The entry notes that the related relative_script_path vector is already covered by CVE-2006-2270. ...