CVE-2006-4870

EPSS 9.9%

Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) inc/design.inc.php or (2) inc/admin_design.inc.php.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/2377unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/21955 https://exchange.xforce.ibmcloud.com/vulnerabilities/28981 https://www.exploit-db.com/exploits/2377 http://www.osvdb.org/28923 http://www.osvdb.org/28924 http://www.securityfocus.com/bid/20068 http://www.vupen.com/english/advisories/2006/3659