CVE-2006-2730

EPSS 2.6%

PHP remote file inclusion vulnerability in admin/lib_action_step.php in Hot Open Tickets (HOT) 11012004_ver2f, when register_globals is enabled, allows remote attackers to include arbitrary files via the GLOBALS[CLASS_PATH] parameter. NOTE: this issue might be resultant from a global overwrite vulnerability.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/1835unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/20331 https://exchange.xforce.ibmcloud.com/vulnerabilities/26934 https://www.exploit-db.com/exploits/1835 http://www.securityfocus.com/bid/18137 http://www.vupen.com/english/advisories/2006/2022