CVE-2006-5440

The CVE-2006-5440 entry describes a PHP remote file inclusion in Comdev Form Designer 4.1, specifically in adminfoot.php. The root cause is the use of register_globals, enabling an attacker to supply a URL in the path[docroot] parameter to execute arbitrary PHP code on the server. This results in...