← back
CVE-2006-0147

CVE-2006-0147

EPSS 12.8%
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PhpOpenChat, possibly (7) MAXdev MD-Pro, and (8) Simplog, allows remote attackers to execute arbitrary PHP functions via the do parameter, which is saved in a variable that is then executed as a function, as demonstrated using phpinfo.
Affected products
n/a · n/a
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/1663unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://retrogod.altervista.org/phpopenchat_30x_sql_xpl.htmlhttp://retrogod.altervista.org/simplog_092_incl_xpl.htmlhttp://secunia.com/advisories/17418http://secunia.com/advisories/18233http://secunia.com/advisories/18254http://secunia.com/advisories/18260http://secunia.com/advisories/18267http://secunia.com/advisories/18276http://secunia.com/advisories/19555http://secunia.com/advisories/19590http://secunia.com/advisories/19591http://secunia.com/advisories/19600