CVE-2006-2315

PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in…

published May 12, 2006

CVSS
—
EPSS
5%
Percentile
92.0
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the go_info[server][classes_root] parameter. NOTE: the vendor has disputed this vulnerability, saying that session.inc.php is not under the web root in version 2.2, and register_globals is not enabled

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04828 · 92.0th percentile
Published
2006-05-12T00:00Z
EPSS history
Timeline
  • 12 MAY 00:00Z
    PHP remote file inclusion vulnerability in session.inc.php in ISPConfig 2.2.2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in…
    cvelistv5