CVE-2006-6710

Multiple PHP remote file inclusion vulnerabilities in PgmReloaded 0.8.5 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the 1 lang parameter to a index.php, the 2 CFGlibdir and 3 CFGlocaledir parameters to b common.inc.php, and the CFGlocalelangdir parameter to c...

CVE-2006-6710

Multiple PHP remote file inclusion vulnerabilities affect PgmReloaded 0.8.5 and earlier. An attacker can cause arbitrary PHP code execution by supplying URLs to (a) lang in index.php, (b) CFG[libdir] and CFG[localedir] in common.inc.php, and (c) CFG[localelangdir] in form_header.php. Root cause i...