← back
CVE-2006-2860

CVE-2006-2860

EPSS 12.8%
PHP remote file inclusion vulnerability in Webspotblogging 3.0.1 allows remote attackers to execute arbitrary PHP code via a URL in the path parameter to (1) inc/logincheck.inc.php, (2) inc/adminheader.inc.php, (3) inc/global.php, or (4) inc/mainheader.inc.php. NOTE: some of these vectors were also reported for 3.0 in a separate disclosure.
Affected products
n/a · n/a
public PoCs found — 1
cve_referencewww.exploit-db.com/exploits/1871unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://arfis.wordpress.com/2007/09/14/rfi-02-webspotblogging/http://secunia.com/advisories/20439https://exchange.xforce.ibmcloud.com/vulnerabilities/26910https://www.exploit-db.com/exploits/1871http://www.osvdb.org/25992http://www.osvdb.org/25993http://www.osvdb.org/25994http://www.osvdb.org/25995http://www.securityfocus.com/archive/1/447001/100/0/threadedhttp://www.securityfocus.com/archive/1/447576/100/200/threadedhttp://www.securityfocus.com/bid/18260http://www.vupen.com/english/advisories/2006/2127