CVE-2006-5284

CVE-2006-5284 describes a PHP remote file inclusion in Shen Cheng-Da PHP News Reader (aka pnews), affected versions up to 2.6.4. The vulnerability exists in the auth/phpbb.inc.php component, where an attacker can supply a URL via the CFG[auth_phpbb_path] parameter, leading to arbitrary PHP code e...