CVE ID:	CVE-2006-0725
Description:	PHP remote file inclusion vulnerability in prepend.php in Plume CMS 1.0.2, when register_globals is enabled, allows remote attackers to include arbitrary files via a URL in the _PX_config[manager_path] parameter. NOTE: this is a different executable and affected version than CVE-2006-2645.
Test IDs:	1.3.6.1.4.1.25623.1.0.20972
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2006-0725 BugTraq ID: 16662 http://www.securityfocus.com/bid/16662 http://www.osvdb.org/23204 http://securitytracker.com/id?1015624 http://secunia.com/advisories/18883 http://www.vupen.com/english/advisories/2006/0599 XForce ISS Database: plumecms-frontinc-prepend-file-include(27699) https://exchange.xforce.ibmcloud.com/vulnerabilities/27699 XForce ISS Database: plumecms-prepend-file-include(24697) https://exchange.xforce.ibmcloud.com/vulnerabilities/24697