medium4.0Public exploit code
CVE-2006-4418
Directory traversal vulnerability in index.php for Wikepage 2006.2a Opus 10 allows remote attackers to include arbitrary local files via the lng parameter, as …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Wikepage Opus 10 < 2006.2a (lng) - Remote Command Execution2006-08-24 · webapps · php · Verified
Impact
Directory traversal vulnerability in index.php for Wikepage 2006.2a Opus 10 allows remote attackers to include arbitrary local files via the lng parameter, as demonstrated by inserting PHP code into a log file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wikepage | Wikepage | Versions 2006.2, 2006.2a |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/21542
- http://www.osvdb.org/28177
- http://www.securityfocus.com/bid/19694
- http://www.vupen.com/english/advisories/2006/3386
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28555
- https://www.exploit-db.com/exploits/2252
- http://secunia.com/advisories/21542
- http://www.osvdb.org/28177
- http://www.securityfocus.com/bid/19694
- http://www.vupen.com/english/advisories/2006/3386
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28555
- https://www.exploit-db.com/exploits/2252