Vulnerabilities > CVE-2006-3173 - Remote File Include vulnerability in Content*Builder 0.7.5
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
Multiple PHP remote file inclusion vulnerabilities in Content*Builder 0.7.5 allow remote attackers to execute arbitrary PHP code via a URL in the (1) path[cb] parameter to (a) libraries/comment/postComment.php and (b) modules/poll/poll.php, (2) rel parameter to (c) modules/archive/overview.inc.php, and the (3) actualModuleDir parameter to (d) modules/forum/showThread.inc.php. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description | Content Builder 0.7.5 postComment.php Remote File Include Vulnerability. CVE-2006-3173. Webapps exploit for php platform |
id | EDB-ID:30634 |
last seen | 2016-02-03 |
modified | 2007-10-03 |
published | 2007-10-03 |
reporter | Mehrad Ansari Targhi |
source | https://www.exploit-db.com/download/30634/ |
title | Content Builder 0.7.5 postComment.php Remote File Include Vulnerability |