CVE-2006-3075

CVE-2006-3075 involves multiple PHP remote file inclusion vulnerabilities in PictureDis Professional (versions up to 1.33 Build 234) and PictureDis Photoalbum (up to 4.82). The underlying issue is that the lang parameter used to select files within photoalbum/ (specifically thumstbl.php, wpfiles....