CVE-2006-0169

addresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers to execute arbitrary PHP code via the pdbfile variable, then…

published January 11, 2006

CVSS
—
EPSS
2%
Percentile
79.4
In the wild
Unconfirmed
What it is

addresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers to execute arbitrary PHP code via the pdbfile variable, then directly accessing those files from the uploads directory.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01903 · 79.4th percentile
Published
2006-01-11T21:00Z
EPSS history
Timeline
  • 11 JAN 21:00Z
    addresses.php3 in MyPhPim 01.05 does not restrict uploaded files, which allows remote attackers to execute arbitrary PHP code via the pdbfile variable, then…
    cvelistv5