CVE-2006-1831

EPSS 8.3%

Direct static code injection vulnerability in sysinfo.cgi in sysinfo 1.21 and possibly other versions before 2.25 allows remote attackers to execute arbitrary commands via a leading ; (semicolon) in the name parameter in a systemdoc action, which is injected into phpinfo.php.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/1677unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/19690 https://exchange.xforce.ibmcloud.com/vulnerabilities/25906 https://www.exploit-db.com/exploits/1677 http://www.securityfocus.com/bid/17523 http://www.vupen.com/english/advisories/2006/1360