CVE-2006-4077

CVE-2006-4077 concerns a PHP remote file inclusion in Vincenzo Valvano’s Comet WebFileManager (CWFM) version 0.9.1 (and possibly earlier). The vulnerability arises in the CheckUpload.php script through the Language parameter, allowing an attacker to supply a URL that causes the PHP interpreter to...