CVE-2006-7208: Improper Input Validation

PHP remote file inclusion vulnerability in download.php in the Adam van Dongen Forum comforum component aka phpBB component 1.2.4RC3 and earlier for Mambo allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...