CVE-2006-6511

dadaIMC .99.3 uses an insufficiently restrictive FilesMatch directive in the installed .htaccess file, which allows remote attackers to execute arbitrary PHP…

published December 14, 2006

CVSS
—
EPSS
1%
Percentile
69.6
In the wild
Unconfirmed
What it is

dadaIMC .99.3 uses an insufficiently restrictive FilesMatch directive in the installed .htaccess file, which allows remote attackers to execute arbitrary PHP code by uploading files whose names contain (1) feature, (2) editor, (3) newswire, (4) otherpress, (5) admin, (6) pbook, (7) media, or (8) mod, which are processed as PHP file types (application/x-httpd-php).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01272 · 69.6th percentile
Published
2006-12-14T00:00Z
EPSS history
Timeline
  • 14 DEC 00:00Z
    dadaIMC .99.3 uses an insufficiently restrictive FilesMatch directive in the installed .htaccess file, which allows remote attackers to execute arbitrary PHP…
    cvelistv5