CVE-2008-6305

CVE-2008-6305 affects Free Directory Script 1.1.1. It is a PHP remote file-inclusion vulnerability in init.php that can be triggered when register_globals is enabled, allowing an attacker to execute arbitrary PHP code via a URL in the API_HOME_DIR parameter. Connected sources corroborate the vuln...