high7.5Public exploit code
CVE-2006-0940
Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to execute arbitrary PHP code via variables…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- ShoutLIVE 1.1.0 - 'savesettings.php' Remote Code Execution2006-03-18 · webapps · php · Verified
Impact
Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to execute arbitrary PHP code via variables that are written to settings.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cynical Games | Shoutlive | Version 1.1.0 |
References
- NVD record
- CVE.org record
- http://evuln.com/vulns/87/summary.html
- http://secunia.com/advisories/19047
- http://securityreason.com/securityalert/557
- http://www.osvdb.org/23482
- http://www.securityfocus.com/archive/1/426985/100/0/threaded
- http://www.securityfocus.com/bid/16857
- http://www.vupen.com/english/advisories/2006/0755
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24897
- http://evuln.com/vulns/87/summary.html
- http://secunia.com/advisories/19047
- http://securityreason.com/securityalert/557
- http://www.osvdb.org/23482
- http://www.securityfocus.com/archive/1/426985/100/0/threaded
- http://www.securityfocus.com/bid/16857
- http://www.vupen.com/english/advisories/2006/0755
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24897