CVE-2006-3562

This exploit demonstrates a remote file inclusion vulnerability in Plume CMS due to improper input sanitization. An attacker can execute arbitrary server-side script code by manipulating the `_PX_config[manager_path]` parameter in `rss.php`.

This exploit demonstrates a remote file inclusion vulnerability in Plume CMS due to improper input sanitization. An attacker can execute arbitrary server-side script code by manipulating the `_PX_config[manager_path]` parameter.

This exploit demonstrates a remote file inclusion vulnerability in Plume CMS by manipulating the `_PX_config[manager_path]` parameter in `search.php` to include arbitrary remote files. The vulnerability arises due to insufficient input sanitization, allowing an attacker to execute server-side script code with webserver privileges.