CVE-2006-3847

CVE-2006-3847: PHP remote file inclusion in MoSpray (aka com_mospray) 1.8 RC1. The vulnerability affects basedir handling in multiple scripts (admin.php, and possibly details.php, modify.php, newgroup.php, newtask.php, rss.php), allowing an attacker to cause arbitrary PHP code execution via a URL...