high7.5Public exploit code
CVE-2006-6586
Multiple PHP remote file inclusion vulnerabilities in Vortex Blog (vBlog, aka C12) a0.1_nonfunc allow remote attackers to execute arbitrary PHP code via a URL …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- vBlog / C12 0.1 - 'cfgProgDir' Remote File Inclusion2006-11-08 · webapps · php · Verified
Impact
Multiple PHP remote file inclusion vulnerabilities in Vortex Blog (vBlog, aka C12) a0.1_nonfunc allow remote attackers to execute arbitrary PHP code via a URL in the cfgProgDir parameter in (1) secure.php or (2) checklogin.php in admin/auth/.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vblog | Vblog | Version a0.1_nonfunc |