CVE-2006-5904

Multiple PHP remote file inclusion vulnerabilities in MWChat Pro 7.0 allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[MWCHAT_Libs]…

published November 15, 2006

CVSS
—
EPSS
1%
Percentile
69.5
In the wild
Unconfirmed
What it is

Multiple PHP remote file inclusion vulnerabilities in MWChat Pro 7.0 allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[MWCHAT_Libs] parameter to (1) about.php, (2) buddy.php, (3) chat.php, (4) dialog.php, (5) head.php, (6) help.php, (7) index.php, and (8) license.php, different vectors than CVE-2005-1869.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01264 · 69.5th percentile
Published
2006-11-15T15:00Z
EPSS history
Timeline
  • 15 NOV 15:00Z
    Multiple PHP remote file inclusion vulnerabilities in MWChat Pro 7.0 allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[MWCHAT_Libs]…
    cvelistv5