CVE-2006-4788

Telekorn SignKorn Guestbook (SL) v1.3 and earlier is affected by CVE-2006-4788 (PHP remote file inclusion). The vulnerability occurs when register_globals is enabled and _SESSION[permission] = "yes", allowing an attacker to execute arbitrary PHP code via a URL in the dir_path parameter in include...