CVE-2006-5308

Open Conference Systems (OCS) before 1.1.6 is affected by multiple PHP remote file inclusion vulnerabilities. The issue is triggered via a URL in the fullpath parameter used by include/theme.inc.php or include/footer.inc.php, potentially allowing an unauthenticated attacker to view arbitrary file...