IRSR pageheaderdefault.inc.php sysSessionPath Parameter PHP Code Execution - Ver2 (CVE-2006-4237)

A code execution vulnerability has been reported in Invisionix Roaming System Remote IRSR. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2006-4237

PHP remote file inclusion vulnerability in pageheaderdefault.inc.php in Invisionix Roaming System Remote IRSR 0.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the sysSessionPath parameter...

CVE-2006-4237

CVE-2006-4237 affects Invisionix Roaming System Remote (IRSR) up to version 0.2 and earlier, where pageheaderdefault.inc.php is vulnerable to a PHP remote file inclusion via the _sysSessionPath parameter, enabling remote code execution. Affected component/file: pageheaderdefault.inc.php. Root cau...