CVE-2006-6023

Affected software: Bloo 1.0, in phoo.base.php. Vulnerability: PHP remote file inclusion via a URL provided to the descriptorFileList parameter, allowing remote code execution; root cause noted as descriptorFileList being used in a function definition. Impact: remote arbitrary PHP code execution (...