CVE-2006-4629

EPSS 3.4%

PHP remote file inclusion vulnerability in affichage/commentaires.php in C-News.fr C-News 1.0.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the path parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/2308unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/21758 https://exchange.xforce.ibmcloud.com/vulnerabilities/28766 https://www.exploit-db.com/exploits/2308 http://www.osvdb.org/28552 http://www.securityfocus.com/bid/19861 http://www.vupen.com/english/advisories/2006/3471