CVE-2006-6760

CVE-2006-6760 concerns Phpmymanga 0.8.1 and earlier. The vulnerability is a PHP remote file inclusion in template.php that lets an attacker cause code execution by supplying a URL in the (1) actionsPage or (2) formPage parameters. The underlying issue is unsafely including external URLs, enabling...