CVE-2006-4456

EPSS 3.3%

PHP remote file inclusion vulnerability in functions.php in phpECard 2.1.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the include_path parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/2275unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/21676 http://securitytracker.com/id?1016768 https://exchange.xforce.ibmcloud.com/vulnerabilities/28623 https://www.exploit-db.com/exploits/2275 http://www.osvdb.org/28291 http://www.securityfocus.com/bid/19752 http://www.vupen.com/english/advisories/2006/3411