CVE-2006-2845 – Redaxo 3.2 - 'INCLUDE_PATH' Remote File Inclusion

https://notcve.org/view.php?id=CVE-2006-2845

06 Jun 2006 — PHP remote file inclusion vulnerability in Redaxo 3.0 up to 3.2 allows remote attackers to execute arbitrary PHP code via a URL in the REX[INCLUDE_PATH] parameter to image_resize/pages/index.inc.php. • https://www.exploit-db.com/exploits/1861 •