CVE-2006-2852

PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP…

published June 6, 2006

CVSS
—
EPSS
11%
Percentile
95.9
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the file_path parameter in (1) index.php, (2) feedback.php, and (3) printfriendly.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.11082 · 95.9th percentile
Published
2006-06-06T20:03Z
EPSS history
Timeline
  • 06 JUN 20:03Z
    PHP remote file inclusion vulnerability in dotWidget CMS 1.0.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP…
    cvelistv5