CVE-2006-5527

Affected software: Intelimen InteliEditor 1.2.x. The vulnerability is a PHP remote file inclusion in lib.editor.inc.php, exploitable via a URL in the sys_path parameter, allowing remote code execution. Root cause: unvalidated sys_path leads to inclusion of arbitrary PHP code. Impact stated by CVS...

CVE-2006-5527

PHP remote file inclusion vulnerability in lib.editor.inc.php in Intelimen InteliEditor 1.2.x allows remote attackers to execute arbitrary PHP code via a URL in the syspath parameter...