CVE-2006-2485

CVE-2006-2485 refers to a PHP remote file inclusion vulnerability in Quezza, affecting 1.0 and earlier (possibly 1.1.0). The flaw is in includes/class_template.php where an attacker can supply a URL via the quezza_root_path parameter to execute arbitrary PHP code on the affected server. The conne...