CVE-2006-3422

PHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute arbitrary PHP code via the config[template_path] parameter in…

published July 7, 2006

CVSS
—
EPSS
3%
Percentile
84.7
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute arbitrary PHP code via the config[template_path] parameter in user_bottom.php, as used by multiple templates including (1) rwb (template/rwb/user_bottom.php), (2) gwb (template/rwb/user_bottom.php, (3) blues, (4) bluwhi, and (5) grns.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02537 · 84.7th percentile
Published
2006-07-07T00:00Z
EPSS history
Timeline
  • 07 JUL 00:00Z
    PHP remote file inclusion vulnerability in WonderEdit Pro CMS allows remote attackers to execute arbitrary PHP code via the config[template_path] parameter in…
    cvelistv5