CVE-2006-5401

CVE-2006-5401 describes a PHP remote file inclusion vulnerability in template/barnraiser_01/p_new_password.tpl.php on AROUNDMe 0.5.2 and earlier. The underlying issue allows an attacker to craft a URL for the templatePath parameter to cause arbitrary PHP code execution on affected installations. ...