high7.5Public exploit code
CVE-2006-3991
PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote attackers to execute arbitrary PHP code via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Voodoo chat 1.0RC1b - 'file_path' Remote File Inclusion2006-08-01 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in index.php in Vlad Vostrykh Voodoo chat 1.0RC1b and earlier allows remote attackers to execute arbitrary PHP code via a URL in the file_path parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Voc-Project | Voodoo Chat | through 1.0_rc1b |
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/19277
- http://www.vupen.com/english/advisories/2006/3091
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28197
- https://www.exploit-db.com/exploits/2102
- http://www.securityfocus.com/bid/19277
- http://www.vupen.com/english/advisories/2006/3091
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28197
- https://www.exploit-db.com/exploits/2102