CVE-2006-6167

Active PHP Bookmarks (APB) 1.1.02 contains PHP remote file inclusion vulnerabilities allowing remote code execution via a URL in APB_SETTINGS['apb_path'] in apb_common.php or apb.php. Affected components: apb_common.php, apb.php. Root cause: RFI through unvalidated APB_SETTINGS parameter. Impact:...