CVE-2006-3692

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• ListMessenger 0.9.3 - 'LM_Path' Remote File Inclusion2006-07-17 · webapps · php · Verified

Impact

PHP remote file inclusion vulnerability in enduser/listmessenger.php in ListMessenger 0.9.3 allows remote attackers to execute arbitrary PHP code via a URL in the lm_path parameter. NOTE: the vendor has disputed this issue to SecurityTracker, stating that the $lm_path variable is set to a constant value. As of 20060726, CVE concurs with the vendor based on SecurityTracker's post-disclosure analysis

Affected products

References

• NVD record
• CVE.org record
• http://securityreason.com/securityalert/1243
• http://securitytracker.com/id?1016530
• http://www.attrition.org/pipermail/vim/2006-July/000946.html
• http://www.osvdb.org/28289
• http://www.securityfocus.com/archive/1/440291/100/0/threaded
• http://www.securityfocus.com/bid/19014
• http://securityreason.com/securityalert/1243
• http://securitytracker.com/id?1016530
• http://www.attrition.org/pipermail/vim/2006-July/000946.html
• http://www.osvdb.org/28289
• http://www.securityfocus.com/archive/1/440291/100/0/threaded
• http://www.securityfocus.com/bid/19014