high7.5Public exploit code
CVE-2006-5118
PHP remote file inclusion vulnerability in index.php3 in the PDD package for PHPSelect Web Development Division allows remote attackers to execute arbitrary PH…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHPSelect Web Development - 'index.php3' Remote File Inclusion2006-09-27 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in index.php3 in the PDD package for PHPSelect Web Development Division allows remote attackers to execute arbitrary PHP code via a URL in the Application_Root parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpselect | Web Development Division | All versions |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/1666
- http://www.securityfocus.com/archive/1/447177/100/0/threaded
- http://www.securityfocus.com/bid/20231
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29223
- http://securityreason.com/securityalert/1666
- http://www.securityfocus.com/archive/1/447177/100/0/threaded
- http://www.securityfocus.com/bid/20231
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29223