CVE-2005-2328

CVE-2005-2328 pertains to a PHP remote file inclusion vulnerability in im.php of Laffer 0.3.2.6 and 0.3.2.7. The issue allows remote attackers to execute arbitrary PHP code via the CFG_PATH variable. In affected versions, the attack surface is network-based with low complexity and no authenticati...