CVE-2006-5438

PHP remote file inclusion vulnerability in adminfoot.php in Comdev Forum 4.1, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the pathdocroot parameter. NOTE: the provenance of this information is unknown; the details are obtained from third par...

CVE-2006-5438

CVE-2006-5438 : PHP remote file inclusion in adminfoot.php of Comdev Forum 4.1 when register_globals is enabled. An attacker can supply a URL in the path[docroot] parameter to execute arbitrary PHP code remotely. The provided documents do not include explicit remediation steps. Exploitation statu...