system
Describe <CVE-2006-1749>.
user
What is <CVE-2006-1749>?
assistant
PHP remote file inclusion vulnerability in config.php in phpListPro 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the returnpath parameter.  NOTE: this issue was later reported to affect 2.01 as well..