CVE-2006-3300

CVE-2006-3300 describes a PHP remote file inclusion in PhpMySms 2.0 (and earlier) triggered via the ROOT_PATH parameter in sms_config/gateway.php. The underlying issue is that user-supplied URLs are used in a context that allows code execution, enabling an attacker to run arbitrary PHP code on th...