high7.5Public exploit code
CVE-2006-4329
Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG (Pre-Alpha) 0.0.5b and earlier allow remote attackers to execute arbitrary PHP code vi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Shadows Rising RPG 0.0.5b - Remote File Inclusion2006-08-20 · webapps · php · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG (Pre-Alpha) 0.0.5b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[gameroot] parameter to (1) core/includes/security.inc.php, (2) core/includes/smarty.inc.php, (3) qcms/includes/smarty.inc.php or (4) qlib/smarty.inc.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Shadows Rising Rpg | Shadows Rising Rpg | through 0.0.5b_pre-alpha |
References
- NVD record
- CVE.org record
- http://www.attrition.org/pipermail/vim/2006-August/000986.html
- http://www.osvdb.org/28282
- http://www.osvdb.org/28283
- http://www.securityfocus.com/bid/19608
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28478
- https://www.exploit-db.com/exploits/2229
- http://www.attrition.org/pipermail/vim/2006-August/000986.html
- http://www.osvdb.org/28282
- http://www.osvdb.org/28283
- http://www.securityfocus.com/bid/19608
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28478
- https://www.exploit-db.com/exploits/2229