CVE-2006-5252 - Muddier Card

Description

PHP remote file inclusion vulnerability in includes/core.lib.php in Webmedia Explorer 2.8.7 allows remote attackers to execute arbitrary PHP code via a URL in the path_include parameter.

Reference

http://www.securityfocus.com/bid/20421 http://secunia.com/advisories/22318 http://www.rahim.webd.pl/exploity/Exploits/96.txt http://www.osvdb.org/29587