CVE-2006-1200

Direct static code injection vulnerability in add_link.txt in daverave Link Bank allows remote attackers to execute arbitrary PHP code via the url_name…

published March 14, 2006

CVSS
—
EPSS
2%
Percentile
79.5
In the wild
Unconfirmed
What it is

Direct static code injection vulnerability in add_link.txt in daverave Link Bank allows remote attackers to execute arbitrary PHP code via the url_name parameter, which is not sanitized before being stored in links.txt, which is later used in an include statement.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01903 · 79.5th percentile
Published
2006-03-14T01:00Z
EPSS history
Timeline
  • 14 MAR 01:00Z
    Direct static code injection vulnerability in add_link.txt in daverave Link Bank allows remote attackers to execute arbitrary PHP code via the url_name…
    cvelistv5