CVE-2006-5543 - Vasoconstrictive Splittail

Description

PHP remote file inclusion vulnerability in misc/function.php3 in PHP Generator of Object SQL Database (PGOSD) when register_globals is enabled allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.

Reference

http://www.attrition.org/pipermail/vim/2006-October/001097.html http://www.securityfocus.com/bid/20668 http://www.securityfocus.com/bid/20677 http://securityreason.com/securityalert/1783 https://exchange.xforce.ibmcloud.com/vulnerabilities/29696 https://www.exploit-db.com/exploits/2612 http://www.securityfocus.com/archive/1/449475/100/0/threaded