CVE-2006-1031

config/config_inc.php in iGENUS Webmail 2.02 and earlier allows remote attackers to include arbitrary local files via the SG_HOME parameter.

Date published : 2006-03-07

http://www.securityfocus.com/bid/16829

http://retrogod.altervista.org/igenus_202_xpl_pl.html