Vulnerabilities > CVE-2006-2864 - Unspecified vulnerability in Blueshoes Framework 4.5

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
blueshoes
exploit available
NVD
Published: 2006-06-06
Updated: 2024-11-21

Summary

Multiple PHP remote file inclusion vulnerabilities in BlueShoes Framework 4.6 allow remote attackers to execute arbitrary PHP code via a URL in the (1) APP[path][applications] parameter to (a) Bs_Faq.class.php, (2) APP[path][core] parameter to (b) fileBrowserInner.php, (c) file.php, and (d) viewer.php, and (e) Bs_ImageArchive.class.php, (3) GLOBALS[APP][path][core] parameter to (f) Bs_Ml_User.class.php, or (4) APP[path][plugins] parameter to (g) Bs_Wse_Profile.class.php.

Vulnerable Configurations

Part Description Count
Application
Blueshoes
2

Exploit-Db

descriptionBlueShoes Framework <= 4.6 Remote File Include Vulnerabilities. CVE-2006-2864. Webapps exploit for php platform
fileexploits/php/webapps/1870.txt
idEDB-ID:1870
last seen2016-01-31
modified2006-06-03
platformphp
port
published2006-06-03
reporterKacper
sourcehttps://www.exploit-db.com/download/1870/
titleBlueShoes Framework <= 4.6 - Remote File Include Vulnerabilities
typewebapps

References