CVE-2006-6856

Direct static code injection vulnerability in WebText CMS 0.4.5.2 and earlier allows remote attackers to inject arbitrary PHP code into a script in wt/users/…

published January 4, 2007

CVSS
—
EPSS
3%
Percentile
85.3
In the wild
Unconfirmed
What it is

Direct static code injection vulnerability in WebText CMS 0.4.5.2 and earlier allows remote attackers to inject arbitrary PHP code into a script in wt/users/ via the im parameter during a profile edit (edycja) operation, which is then executed via a direct request for this script.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02609 · 85.3th percentile
Published
2007-01-04T02:00Z
EPSS history
Timeline
  • 04 JAN 02:00Z
    Direct static code injection vulnerability in WebText CMS 0.4.5.2 and earlier allows remote attackers to inject arbitrary PHP code into a script in wt/users/…
    cvelistv5