CVE-2006-5135

CVE-2006-5135 describes multiple PHP remote file inclusion vulnerabilities in A-Blog 2. An attacker can cause arbitrary PHP code execution by supplying a URL in parameters such as navigation_start, navigation_middle, and open_box/middle_box/close_box in sources/myaccount.php, navigation_end in na...