CVE-2006-4733

PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) 0.3.1 and earlier allows…

published September 13, 2006

CVSS
—
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) 0.3.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the config[sipssys] parameter. NOTE: the product's documentation recommends placing the affected file outside of the web root, so the scope of issue is limited to admins who do not, or cannot, follow this recommendation.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03230 · 88.2th percentile
Published
2006-09-13T22:00Z
EPSS history
Timeline
  • 13 SEP 22:00Z
    PHP remote file inclusion vulnerability in sipssys/code/box.inc.php in Haakon Nilsen simple, integrated publishing system (SIPS) 0.3.1 and earlier allows…
    cvelistv5