CVE-2006-5308: Undefined Security Weakness

Multiple PHP remote file inclusion vulnerabilities in Open Conference Systems OCS before 1.1.6 allow remote attackers to execute arbitrary PHP code via a URL in the fullpath parameter in 1 include/theme.inc.php or 2 include/footer.inc.php...