medium5.1Public exploit code
CVE-2006-2768
PHP remote file inclusion vulnerability in METAjour 2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the (1) sy…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- metajour 2.1 - 'system_path' Remote File Inclusion2006-05-31 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in METAjour 2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the (1) system_path parameter in a large number of files in the (a) app/edocument/, (b) app/eproject/, (c) app/erek/, and (d) extension/ directories, and the (2) GLOBALS[system_path] parameter in (e) extension/sitemap/sitemap.datatype.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ipw Systems | Metajour | Version 2.1 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/20404
- http://www.securityfocus.com/bid/18211
- http://www.vupen.com/english/advisories/2006/2077
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26892
- https://www.exploit-db.com/exploits/1855
- http://secunia.com/advisories/20404
- http://www.securityfocus.com/bid/18211
- http://www.vupen.com/english/advisories/2006/2077
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26892
- https://www.exploit-db.com/exploits/1855