CVE-2006-7021

The CVE-2006-7021 entry concerns a PHP remote file inclusion in Plume CMS 1.1.3. Specifically, dbinstall.php under manager/tools/link accepts a URL via the _PX_config[manager_path] parameter, allowing an attacker to execute arbitrary PHP code remotely. Affected software: Plume CMS 1.1.3; vulnerab...