CVE-2006-7026

CVE-2006-7026 describes a PHP remote file inclusion in Aardvark Topsites PHP 4.2.2 and earlier. The issue occurs in sources/join.php when register_globals is enabled, allowing an attacker to execute arbitrary PHP code via a URL supplied to the CONFIG[path] parameter (a similar vector to CVE-2006-...