CVE-2006-5154

DeluxeBB 1.09 and earlier are affected by a PHP remote file inclusion in cp/sig.php. The vulnerability allows an attacker to execute arbitrary PHP code by supplying a malicious URL in the templatefolder parameter, enabling remote code execution. Affected component: cp/sig.php; root cause: unsafe ...