CVE-2006-5768

CVE-2006-5768 covers multiple PHP remote file inclusion flaws in Cyberfolio 2.0 RC1 and earlier when register_globals is enabled. The vulnerability allows an attacker to cause the application to execute arbitrary PHP code by supplying a URL in the av parameter to one of four scripts: msg/view.php...