CVE-2006-7107

CVE-2006-7107 is a PHP remote file inclusion vulnerability in upgrade.php of Coalescent Systems freePBX 2.1.3. The issue allows remote attackers to execute arbitrary PHP code via a URL in the amp_conf[AMPWEBROOT] parameter, due to inadequate input handling. The linked sources (NVD and CVE listing...