medium6.8Public exploit code
CVE-2006-5767
PHP remote file inclusion vulnerability in includes/xhtml.php in Drake CMS 0.2.2 alpha rev.846 and earlier allows remote attackers to execute arbitrary PHP cod…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Drake CMS < 0.2.3 ALPHA rev.916 - Remote File Inclusion2006-11-04 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in includes/xhtml.php in Drake CMS 0.2.2 alpha rev.846 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the d_root parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drake Team | Drake Cms | through 0.2.2_alpha_r846 |
Weakness classification
References
- NVD record
- CVE.org record
- http://sourceforge.net/forum/forum.php?forum_id=636860
- http://www.attrition.org/pipermail/vim/2006-December/001202.html
- http://www.securityfocus.com/bid/20914
- http://www.vupen.com/english/advisories/2006/4345
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30021
- https://www.exploit-db.com/exploits/2713
- http://sourceforge.net/forum/forum.php?forum_id=636860
- http://www.attrition.org/pipermail/vim/2006-December/001202.html
- http://www.securityfocus.com/bid/20914
- http://www.vupen.com/english/advisories/2006/4345
- https://exchange.xforce.ibmcloud.com/vulnerabilities/30021
- https://www.exploit-db.com/exploits/2713