Vulnerabilities > CVE-2006-2121 - Remote File Include vulnerability in I-RATER Platinum Config_settings.TPL.PHP

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
NONE
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
i-rater
exploit available
NVD
Published: 2006-05-01
Updated: 2018-10-18

Summary

PHP remote file include vulnerability in admin/config_settings.tpl.php in I-RATER Platinum allows remote attackers to execute arbitrary code via a URL in the include_path parameter. NOTE: this is a different vector, and possibly a different vulnerability, than CVE-2006-1929.

Vulnerable Configurations

Part Description Count
Application
I-Rater
1

Exploit-Db

descriptionI-RATER Platinum Config_settings.TPL.PHP Remote File Include Vulnerability. CVE-2006-2121. Webapps exploit for php platform
idEDB-ID:27763
last seen2016-02-03
modified2006-04-28
published2006-04-28
reporterO.U.T.L.A.W
sourcehttps://www.exploit-db.com/download/27763/
titleI-RATER Platinum Config_settings.TPL.PHP Remote File Include Vulnerability

References