CVE-2006-5615

Textpattern 1.19 is affected by a PHP remote file inclusion in publish.php when register_globals is enabled. The issue allows an attacker to execute arbitrary PHP code via a URL supplied in the txpcfg[txpath] parameter, indicating a remote code execution risk due to RFI. The available documents d...