CVE-2006-5621

EPSS 2.7%

PHP remote file inclusion vulnerability in end.php in ask_rave 0.9 PR, and other versions before 0.9b, allows remote attackers to execute arbitrary PHP code via a URL in the footfile parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/2654unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://rave.jk-digital.com/blog/2006/12/08/ask_rave-09b-released/https://exchange.xforce.ibmcloud.com/vulnerabilities/29825 https://www.exploit-db.com/exploits/2654 http://www.securityfocus.com/bid/20758 http://www.vupen.com/english/advisories/2006/4211