CVE-2006-6732

CVE-2006-6732 affects cwmVote 1.0 where archive.php is vulnerable to a PHP remote file inclusion via the abs parameter, enabling arbitrary PHP code execution. Provenance in the public CVE entry indicates an RFI vector with network access and no authentication, resulting in partial confidentiality...

CVE-2006-6732

PHP remote file inclusion vulnerability in archive.php in cwmVote 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the abs parameter...