EUVD-2006-2578

Malware in sbrugna...

CVE-2006-2578: Undefined Security Weakness

admin/cron.php in eSyndicat Directory 1.2, when registerglobals is enabled and magicquotesgpc is disabled, allows remote attackers to include arbitrary files and possibly execute arbitrary PHP code via a null-terminated value in the pathtoconfig parameter...