CVE ID:	CVE-2005-4593
Description:	PHP remote file inclusion vulnerability in phpDocumentor 1.3.0 rc4 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary code via a URL in the (1) FORUM[LIB] parameter in Documentation/tests/bug-559668.php and (2) the root_dir parameter in docbuilder/file_dialog.php.
Test IDs:	1.3.6.1.4.1.25623.1.0.20374
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2005-4593 BugTraq ID: 16080 http://www.securityfocus.com/bid/16080 Bugtraq: 20051229 PhpDocumentor <= 1.3.0 rc4 Arbitrary remote/local inclusion (Google Search) http://www.securityfocus.com/archive/1/420441/100/0/threaded http://rgod.altervista.org/phpdocumentor_130rc4_incl_expl.html http://www.osvdb.org/22114 http://www.osvdb.org/22115 http://securitytracker.com/id?1015423 http://secunia.com/advisories/18248 http://securityreason.com/securityalert/303 XForce ISS Database: phpdocumentor-multiple-script-file-include(23902) https://exchange.xforce.ibmcloud.com/vulnerabilities/23902