CVE-2006-5386

Summary of CVE-2006-5386: A PHP remote file inclusion in the NuralStorm Webmail project (versions 0.98b and earlier) can allow an attacker to execute arbitrary PHP code. This occurs when register_globals is enabled and an attacker supplies a URL in the DEFAULT_SKIN parameter that is processed by ...