CVE-2006-4055

This exploit leverages a file inclusion vulnerability in TSEP <= 0.942 due to improper handling of the `tsep_config[absPath]` parameter, allowing remote file inclusion when `register_globals` is enabled. The PoC demonstrates how an attacker can include a remote shell (e.g., r57shell.txt) via the vulnerable `colorswitch.php` script.

The exploit demonstrates a Remote File Inclusion (RFI) vulnerability in TSEP 0.9.4.2 due to unsanitized user input in the `tsep_config[absPath]` parameter. An attacker can include and execute arbitrary PHP code from a remote server by manipulating the parameter in the `copyright.php` file.