CVE-2006-5410 - Eleventh Promise

Description

PHP remote file inclusion vulnerability in templates/tmpl_dfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter. NOTE: it is possible that this issue overlaps CVE-2006-4189.

Reference

http://www.securityfocus.com/bid/20576 http://securityreason.com/securityalert/1747 https://exchange.xforce.ibmcloud.com/vulnerabilities/29604 http://www.securityfocus.com/archive/1/449090/100/0/threaded