CVE-2006-0214

Eval injection vulnerability in ezDatabase 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the db_id parameter to visitorupload.php…

published January 15, 2006

CVSS
—
EPSS
3%
Percentile
86.7
In the wild
Unconfirmed
What it is

Eval injection vulnerability in ezDatabase 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the db_id parameter to visitorupload.php, as demonstrated using phpinfo and include function calls.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02873 · 86.7th percentile
Published
2006-01-15T11:00Z
EPSS history
Timeline
  • 15 JAN 11:00Z
    Eval injection vulnerability in ezDatabase 2.0 and earlier allows remote attackers to execute arbitrary PHP code via the db_id parameter to visitorupload.php…
    cvelistv5