CVE-2006-5252

CVE-2006-5252 affects Webmedia Explorer 2.8.7. A PHP remote file inclusion is possible via the path_include parameter in includes/core.lib.php, allowing remote attackers to execute arbitrary PHP code by supplying a crafted URL. The NVD entry lists a base score of 5.1 (Medium) with network attack ...