CVE-2006-1154

Publicada em 10 mar 2006 · Atualizada em 07 ago 2024

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

3Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 2.8%

PHP remote file inclusion vulnerability in archive.php in Fantastic News 2.1.2 allows remote attackers to include arbitrary files via the CONFIG[script_path] variable. NOTE: 2.1.4 was also reported to be vulnerable.

Produtos afetados

n/a · n/a

Referências

http://secunia.com/advisories/21807 http://secunia.com/advisories/23519 https://exchange.xforce.ibmcloud.com/vulnerabilities/25064 https://exchange.xforce.ibmcloud.com/vulnerabilities/31121 https://www.exploit-db.com/exploits/3027 http://sx02.coresec.de/advisories/152.txt http://www.securityfocus.com/bid/16985 http://www.securityfocus.com/bid/21796 http://www.vupen.com/english/advisories/2006/0826 http://www.vupen.com/english/advisories/2006/3513