Vulnerabilities > CVE-2006-0940 - Unspecified vulnerability in Cynical Games Shoutlive 1.1.0

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
cynical-games
exploit available
NVD
Published: 2006-03-01
Updated: 2024-11-21

Summary

Multiple direct static code injection vulnerabilities in savesettings.php in ShoutLIVE 1.1.0 allow remote attackers to execute arbitrary PHP code via variables that are written to settings.php.

Vulnerable Configurations

Part Description Count
Application
Cynical_Games
1

Exploit-Db

descriptionShoutLIVE <= 1.1.0 (savesettings.php) Remote Code Execution Exploit. CVE-2006-0940. Webapps exploit for php platform
idEDB-ID:1590
last seen2016-01-31
modified2006-03-18
published2006-03-18
reporterDarkFig
sourcehttps://www.exploit-db.com/download/1590/
titleShoutLIVE <= 1.1.0 savesettings.php Remote Code Execution Exploit

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/44492/EV0087.txt
idPACKETSTORM:44492
last seen2016-12-05
published2006-03-09
reporterAliaksandr Hartsuyeu
sourcehttps://packetstormsecurity.com/files/44492/EV0087.txt.html
titleEV0087.txt

References