CVE-2006-6738

The CVE-2006-6738 entry concerns PHP remote file inclusion in statistic.php of cwmCounter 5.1.1 and earlier. The underlying issue is that an attacker can pass a URL in the path parameter, enabling remote PHP code execution on the affected system. The NVD entry assigns a base CVSSv2 score of 6.8 (...