CVE-2006-5849

The CVE-2006-5849 entry identifies a PHP remote file inclusion in IrayoBlog alpha-0.2.4, caused by unsafe handling in inc/irayofuncs.php that permits arbitrary PHP code execution via a URL supplied to the irayodirhack parameter. Affected software is IrayoBlog (version alpha-0.2.4); root cause is ...