high7.5
CVE-2006-1294
PHP remote file include vulnerability in PageController.php in KnowledgebasePublisher 1.2 allows remote attackers to include and execute arbitrary PHP code via…
Impact
PHP remote file include vulnerability in PageController.php in KnowledgebasePublisher 1.2 allows remote attackers to include and execute arbitrary PHP code via a URL in the dir parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Knowledgebasepublisher | Knowledgebasepublisher | Version 1.2 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/19298
- http://sourceforge.net/project/shownotes.php?release_id=402179&group_id=144153
- http://www.osvdb.org/24002
- http://www.securityfocus.com/bid/17120
- http://www.vupen.com/english/advisories/2006/1020
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25338
- https://www.exploit-db.com/exploits/1587
- http://secunia.com/advisories/19298
- http://sourceforge.net/project/shownotes.php?release_id=402179&group_id=144153
- http://www.osvdb.org/24002
- http://www.securityfocus.com/bid/17120
- http://www.vupen.com/english/advisories/2006/1020
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25338
- https://www.exploit-db.com/exploits/1587