← back
CVE-2006-0940

CVE-2006-0940

EPSS 3.3%
Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to execute arbitrary PHP code via variables that are written to settings.php.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/1590unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://evuln.com/vulns/87/summary.htmlhttp://secunia.com/advisories/19047http://securityreason.com/securityalert/557https://exchange.xforce.ibmcloud.com/vulnerabilities/24897http://www.osvdb.org/23482http://www.securityfocus.com/archive/1/426985/100/0/threadedhttp://www.securityfocus.com/bid/16857http://www.vupen.com/english/advisories/2006/0755