Vulnerabilities > CVE-2006-2392 - Remote File Include vulnerability in Blue Dragon PHP Blue Dragon Platinum2.8.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
NONE Summary
PHP remote file inclusion vulnerability in public_includes/pub_popup/popup_finduser.php in PHP Blue Dragon Platinum 2.8.0 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | Php Blue Dragon CMS <= 2.9 Remote File Include Vulnerability. CVE-2006-2392. Webapps exploit for php platform |
| file | exploits/php/webapps/1779.txt |
| id | EDB-ID:1779 |
| last seen | 2016-01-31 |
| modified | 2006-05-12 |
| platform | php |
| port | |
| published | 2006-05-12 |
| reporter | Kacper |
| source | https://www.exploit-db.com/download/1779/ |
| title | Php Blue Dragon CMS <= 2.9 - Remote File Include Vulnerability |
| type | webapps |