CVE-2006-3532

PHP file inclusion vulnerability in includes/edit_new.php in Pivot 1.30 RC2 and earlier, when register_globals is enabled, allows remote attackers to execute…

published July 12, 2006

CVSS
—
EPSS
8%
Percentile
94.7
In the wild
Unconfirmed
What it is

PHP file inclusion vulnerability in includes/edit_new.php in Pivot 1.30 RC2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a FTP URL or full file path in the Paths[extensions_path] parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.08035 · 94.7th percentile
Published
2006-07-12T21:00Z
EPSS history
Timeline
  • 12 JUL 21:00Z
    PHP file inclusion vulnerability in includes/edit_new.php in Pivot 1.30 RC2 and earlier, when register_globals is enabled, allows remote attackers to execute…
    cvelistv5