CVE-2006-6167

Multiple PHP remote file inclusion vulnerabilities in L

published November 29, 2006

CVSS
—
EPSS
2%
Percentile
78.3
In the wild
Unconfirmed
What it is

Multiple PHP remote file inclusion vulnerabilities in L. Brandon Stone and Nathanial P. Hendler Active PHP Bookmarks (APB) 1.1.02 allow remote attackers to execute arbitrary PHP code via a URL in the APB_SETTINGS['apb_path'] parameter in (1) apb_common.php or (2) apb.php. NOTE: CVE and another third party dispute this vulnerability because these PHP scripts exit if the attack vectors are present in GPC variables

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01799 · 78.3th percentile
Published
2006-11-29T02:00Z
EPSS history
Timeline
  • 29 NOV 02:00Z
    Multiple PHP remote file inclusion vulnerabilities in L
    cvelistv5