CVE-2006-4945

CVE-2006-4945 describes multiple PHP remote file inclusion weaknesses in Cardway (aka Frederic Boudaud) DigitalWebShop 1.128 and earlier. The flaw allows an attacker to cause the webserver to include and execute PHP code from a remote URL by supplying a crafted value in the _PHPLIB[libdir] parame...