CVE-2006-4278

Publication date

2006-08-21 22:00:00

Family

mitre

State

PUBLISHED

Description

PHP remote file inclusion vulnerability in includes/layout/plain.footer.php in SportsPHool 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the mainnav parameter.