high7.5Public exploit code
CVE-2006-0308
PHP remote file inclusion vulnerability in htmltonuke.php in the htmltonuke 2.0 alpha, and possibly other versions, module for PHP-Nuke allows remote attackers…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP-Nuke Module htmltonuke 2.0alpha - 'htmltonuke.php' Remote File Inclusion2007-03-20 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in htmltonuke.php in the htmltonuke 2.0 alpha, and possibly other versions, module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the filnavn parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Htmltonuke | Htmltonuke | Version 2.0_alpha |