CVE-2006-5097

PHP remote file inclusion vulnerability in index.php in net2ftp, possibly 0.1 through 0.62, allows remote attackers to execute arbitrary PHP code via a URL in the applicationrootdir parameter. NOTE: this issue has been disputed by a third party researcher, CVE, and the vendor. The vendor says "th...

CVE-2006-5097

CVE-2006-5097 concerns net2ftp (version range ~0.1–0.62) and a PHP remote file inclusion in index.php via the application_rootdir parameter, potentially allowing arbitrary PHP code execution. The vulnerability is linked to this parameter, but it has been disputed by a third‑party researcher and b...