CVE-2006-5433

CVE-2006-5433 describes a PHP remote file inclusion in ALiCE-CMS 0.1. The vulnerability resides in modules/guestbook/index.php and allows an attacker to execute arbitrary PHP code by supplying a URL in the CONFIG[local_root] parameter. Affected product: ALiCE-CMS 0.1; vulnerable component: module...