Vulnerabilities > CVE-2006-2253 - Remote File Include vulnerability in Otterware Statit 420060207

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
otterware
exploit available

Summary

PHP remote file inclusion vulnerability in visible_count_inc.php in Statit 4 (060207) allows remote attackers to execute arbitrary PHP code via a URL in the statitpath parameter.

Vulnerable Configurations

Part Description Count
Application
Otterware
1

Exploit-Db

descriptionStatIt v4 (statitpath) Remote File Inclusion Exploit. CVE-2006-2253. Webapps exploit for php platform
fileexploits/php/webapps/1752.pl
idEDB-ID:1752
last seen2016-01-31
modified2006-05-05
platformphp
port
published2006-05-05
reporterIGNOR3
sourcehttps://www.exploit-db.com/download/1752/
titleStatIt 4 - statitpath Remote File Inclusion Exploit
typewebapps