CVE-2006-4196

CVE-2006-4196 affects WEBInsta CMS 0.3.1 and possibly earlier, where index.php fails to sanitize the templates_dir parameter before including PHP code. This enables a remote attacker to cause PHP code execution by supplying a crafted URL, effectively performing a remote file inclusion via the tem...