Vulnerabilities > CVE-2006-2008 - Remote File Include vulnerability in Built2go Movie Review Movie_CLS.PHP3

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
built2go
exploit available
NVD
Published: 2006-04-25
Updated: 2017-10-19

Summary

PHP remote file inclusion vulnerability in movie_cls.php in Built2Go PHP Movie Review 2B and earlier allows remote attackers to execute arbitrary PHP code via a URL in the full_path parameter.

Vulnerable Configurations

Part Description Count
Application
Built2Go
3

Exploit-Db

descriptionBuilt2Go PHP Movie Review <= 2B Remote File Inclusion Vulnerability. CVE-2006-2008. Webapps exploit for php platform
fileexploits/php/webapps/1711.txt
idEDB-ID:1711
last seen2016-01-31
modified2006-04-23
platformphp
port
published2006-04-23
reporterCamille Myers
sourcehttps://www.exploit-db.com/download/1711/
titleBuilt2Go PHP Movie Review <= 2B Remote File Inclusion Vulnerability
typewebapps

References