CVE-2006-4609 | PHPprojekt 0.6.1 cm_lib.inc.php path_pre file inclusion (EDB-12854 / BID-19628)

A vulnerability was found in PHPprojekt 0.6.1. It has been classified as critical. Affected is an unknown function in the library cm_lib.inc.php. The manipulation of the argument path_pre leads to file inclusion. This vulnerability is traded as CVE-2006-4609. It is possible to launch the attack remotely. Furthermore, there is an exploit available. The real existence of this vulnerability is still doubted at the moment. It is recommended to upgrade the affected component.