high7.5Public exploit code
CVE-2006-7068
PHP remote file inclusion vulnerability in CliServ Web Community 0.65 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cl_hea…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CliServ Web Community 0.65 - 'cl_headers' Include2006-08-25 · webapps · php · Verified
Impact
PHP remote file inclusion vulnerability in CliServ Web Community 0.65 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cl_headers parameter to (1) menu.php3 and (2) login.php3.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cliserv | Web Community | Versions 0.50, 0.60, 0.61, 0.65 |