CVE-2006-5421

CVE-2006-5421 affects WSN Forum 1.3.4 and earlier. The vulnerability arises when a modified pathname in the pathtoconfig parameter points to an avatar image containing PHP code, which is then accessed by prestart.php, allowing remote attackers to execute arbitrary PHP code. The underlying issue i...