CVE-2006-5282

Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath…

published October 13, 2006

CVSS
—
EPSS
3%
Percentile
88.7
In the wild
Unconfirmed
What it is

Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath parameter to (1) report.php, (2) archive.php, (3) comments.php, (4) init.php, or (5) news.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03390 · 88.7th percentile
Published
2006-10-13T19:00Z
EPSS history
Timeline
  • 13 OCT 19:00Z
    Multiple PHP remote file inclusion vulnerabilities in SH-News 3.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the scriptpath…
    cvelistv5