CVE-2006-1959

Name of the Vulnerable Software and Affected Versions ActualAnalyzer Lite versions 2.72 and earlier ActualScripts Gold versions 7.63 and earlier ActualScripts Server versions 8.23 and earlier

Description The issue allows remote attackers to execute arbitrary code via a URL in the rf parameter. This is a result of a remote file inclusion vulnerability in the direct.php file.

Recommendations For ActualAnalyzer Lite versions 2.72 and earlier, update to a version later than 2.72. For ActualScripts Gold versions 7.63 and earlier, update to a version later than 7.63. For ActualScripts Server versions 8.23 and earlier, update to a version later than 8.23.