CVE-2006-5895
PHP remote file inclusion vulnerability in core/core.php in EncapsCMS 0.3.6 allows remote attackers to execute arbitrary PHP code via a URL in the root parameter.
Date published : 2006-11-14
http://www.securityfocus.com/bid/21001
http://www.securityfocus.com/archive/1/451298/100/0/threaded