CVE-2006-3689

EPSS 3.6%

PHP remote file inclusion vulnerability in user-func.php in Codeworks Gnomedia SubberZ[Lite] allows remote attackers to execute arbitrary PHP code via a URL in the myadmindir parameter. NOTE: this issue has been disputed by a third party that claims that " the myadmindir variable is set before any GET variables are processed.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/28223unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://securityreason.com/securityalert/1246 https://exchange.xforce.ibmcloud.com/vulnerabilities/27748 http://www.osvdb.org/28592 http://www.securityfocus.com/archive/1/440139/100/0/threaded http://www.securityfocus.com/archive/1/440864/100/100/threaded http://www.securityfocus.com/bid/18990