CVE-2006-2770

This exploit demonstrates a file disclosure vulnerability in pppBlog <= 0.3.11 via the randompic.php script. By manipulating the 'files[0]' parameter, an attacker can read arbitrary system files due to insufficient input validation and the requirement of register_globals being enabled.

This exploit leverages a file disclosure vulnerability in pppBlog <= 0.3.8 by manipulating the `files[0]` parameter in `randompic.php` when `register_globals` is enabled. It reads arbitrary files on the target system via a crafted HTTP request.