CVE-2006-5796

Soholaunch Pro Edition 4.9 r46 and earlier is affected by multiple PHP remote file inclusion vulnerabilities when register_globals is enabled. The flaw allows an attacker to execute arbitrary PHP code by redirecting a URL via the _SESSION[docroot_path] parameter to one of two PHP include points: ...