medium6.8Public exploit code
CVE-2006-6765
Multiple PHP file inclusion vulnerabilities in src/admin/pt_upload.php in Pagetool 1.07 allow remote attackers to execute arbitrary PHP code via (1) a local fi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Pagetool CMS 1.07 - 'pt_upload.php' Remote File Inclusion2006-12-24 · webapps · php · Verified
Impact
Multiple PHP file inclusion vulnerabilities in src/admin/pt_upload.php in Pagetool 1.07 allow remote attackers to execute arbitrary PHP code via (1) a local filename or FTP/share URI in the config_file parameter or (2) a URL in the ptconf[src] parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pagetool | Pagetool | through 1.07 |