CVE-2006-6632

CVE-2006-6632 affects Genepi 1.6 and earlier. A PHP remote file inclusion flaw in genepi.php allows an attacker to execute arbitrary PHP code by supplying a URL in the topdir parameter. The vulnerability’s CVSS v2 base score is 6.8 (Medium) with network access, requiring no authentication and par...