CVE-2006-4012

Multiple PHP remote file inclusion vulnerabilities in circeOS SaveWeb Portal 3.4 allow remote attackers to execute arbitrary PHP code via a URL in the SITEPath parameter to 1 poll/poll.php or 2 poll/viewpolls.php. NOTE: the menudx.php vector is already covered by CVE-2005-2687...