critical9.8Public exploit code
CVE-2006-6863
PHP remote file inclusion vulnerability in the Enigma2 plugin (Enigma2.php) in Enigma WordPress Bridge allows remote attackers to execute arbitrary PHP code vi…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WordPress Plugin Enigma 2 Bridge - 'boarddir' Remote File Inclusion2006-12-30 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in the Enigma2 plugin (Enigma2.php) in Enigma WordPress Bridge allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter. NOTE: CVE disputes this issue, since $boarddir is set to a fixed value
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Enigma | Wordpress Bridge | All versions |
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/2093
- http://securitytracker.com/id?017459
- http://www.attrition.org/pipermail/vim/2007-January/001207.html
- http://www.securityfocus.com/archive/1/455555/100/0/threaded
- http://www.securityfocus.com/bid/21826
- https://www.exploit-db.com/exploits/3051
- http://securityreason.com/securityalert/2093
- http://securitytracker.com/id?017459
- http://www.attrition.org/pipermail/vim/2007-January/001207.html
- http://www.securityfocus.com/archive/1/455555/100/0/threaded
- http://www.securityfocus.com/bid/21826
- https://www.exploit-db.com/exploits/3051