Vulnerabilities > CVE-2006-3076 - Remote File Include vulnerability in PHPbluedragon CMS 2.9.1

047910
CVSS 6.4 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
NONE
network
low complexity
phpbluedragon
exploit available
NVD
Published: 2006-06-19
Updated: 2018-10-18

Summary

PHP remote file inclusion vulnerability in software_upload/public_includes/pub_templates/vphptree/template.php in PhpBlueDragon CMS 2.9.1 allows remote attackers to execute arbitrary PHP code via a URL in the vsDragonRootPath parameter.

Vulnerable Configurations

Part Description Count
Application
Phpbluedragon
1

Exploit-Db

descriptionPhp Blue Dragon CMS <= 2.9.1 (template.php) File Include Vulnerability. CVE-2006-3076. Webapps exploit for php platform
idEDB-ID:1913
last seen2016-01-31
modified2006-06-14
published2006-06-14
reporterFederico Fazzi
sourcehttps://www.exploit-db.com/download/1913/
titlePhp Blue Dragon CMS <= 2.9.1 - template.php File Include Vulnerability

References