CVE-2006-6154

EPSS 3.4%

PHP remote file inclusion vulnerability in addcode.php in HIOX Star Rating System Script (HSRS) 1.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the hm parameter.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/2838unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/23078 https://exchange.xforce.ibmcloud.com/vulnerabilities/30527 https://www.exploit-db.com/exploits/2838 http://www.securityfocus.com/archive/1/494928/100/0/threaded http://www.securityfocus.com/bid/21280 http://www.vupen.com/english/advisories/2006/4689