CVE-2006-0852

Direct static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via the…

published February 23, 2006

CVSS
—
EPSS
3%
Percentile
86.2
In the wild
Unconfirmed
What it is

Direct static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via the X-Forwarded-For HTTP header field, which is inserted into content-data.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02793 · 86.2th percentile
Published
2006-02-23T02:00Z
EPSS history
Timeline
  • 23 FEB 02:00Z
    Direct static code injection vulnerability in write.php in Admbook 1.2.2 and earlier allows remote attackers to execute arbitrary PHP code via the…
    cvelistv5