CVE-2006-4636

The CVE-2006-4636 entry concerns a directory traversal vulnerability in SZEWO PhpCommander 3.0 and earlier. An attacker can use the Directory parameter to include and execute arbitrary local files, demonstrated by values that target Apache log files containing PHP code. Affected product: SZEWO Ph...