CVE-2006-6590

CVE-2006-6590: PHP remote file inclusion in AR Memberscript, specifically in usercp_menu.php, allows an attacker to supply a URL via the script_folder parameter to execute arbitrary PHP code. The NVD entry lists a CVSS v2 base score of 7.5 (HIGH) with network vector and low attack complexity, no ...