CVE-2006-6552

CVE-2006-6552 affects BLOG:CMS 4.1.3 and earlier. The vulnerability is a PHP remote file inclusion in admin/plugins/NP_UserSharing.php, allowing an attacker to execute arbitrary PHP code by supplying a URL in the DIR_ADMIN parameter. The NVD records indicate a high base score (7.5) with network a...