Security Advisory
CVE-2006-6154
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
PHP remote file inclusion vulnerability in addcode.php in HIOX Star Rating System Script (HSRS) 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter.