CVE-2006-3069

DoubleSpeak 0.1 is affected by a PHP remote file inclusion when register_globals is enabled, allowing an attacker to execute arbitrary PHP code via config[private] in multiple files (index.php, faq.php, hardware.php). The root cause is the handling of config[private] in those files; third-party r...