CVE-2006-5220

CVE-2006-5220 affects WebYep 1.1.9, enabling multiple PHP remote file inclusion vulnerabilities when register_globals is on. Attackers can cause arbitrary PHP code execution by manipulating the webyep_sIncludePath to load files from: (1) programm/lib/ (e.g., WYApplication.php, WYDocument.php, WYE...