CVE-2006-5240

The CVE refers to a PHP remote file inclusion in Docmint 2.0 and earlier, specifically in engine/require.php. The vulnerability requires register_globals to be enabled and allows remote code execution by supplying a URL in the MY_ENV[BASE_ENGINE_LOC] parameter. This is documented across sources (...