CVE-2006-5613

EPSS 3.4%

PHP remote file inclusion in Core/core.inc.php in MP3 Streaming DownSampler (mp3SDS) 3.0, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the fullpath parameter

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/2666unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/22605 https://exchange.xforce.ibmcloud.com/vulnerabilities/29888 https://www.exploit-db.com/exploits/2666 http://www.osvdb.org/30110 http://www.securityfocus.com/bid/20783 http://www.vupen.com/english/advisories/2006/4230