CVE-2006-5132

phpMyAgenda 3.0 Final and earlier is affected by remote file inclusion via the rootagenda parameter in several scripts (agendaplace.php3, agendaplace2.php3, infoevent.php3, agenda2.php3). The root cause is improper handling/sanitation of the rootagenda parameter, enabling attackers to include arb...