CVE-2006-5472

EPSS 8.6%

PHP remote file inclusion vulnerability in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the lib_dir parameter in (1) lib/registry.lib.php, (2) lib/sqlcompose.lib.php, and (3) lib/sqlsearch.lib.php.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/2520unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/22366 https://exchange.xforce.ibmcloud.com/vulnerabilities/29490 https://www.exploit-db.com/exploits/2520 http://www.osvdb.org/29621 http://www.osvdb.org/29622 http://www.osvdb.org/29623 http://www.vupen.com/english/advisories/2006/4030