CVE-2006-4373

Name of the Vulnerable Software and Affected Versions pSlash version 0.70

Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the lvc include dir parameter in the modules/visitors2/include/config.inc.php file.

Recommendations For pSlash version 0.70, avoid using the lvc include dir parameter in the affected module until the issue is resolved. Restrict access to the modules/visitors2/include/config.inc.php file to minimize the risk of exploitation.