Vulnerabilities > CVE-2006-3984
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
PHP remote file inclusion vulnerability in phpAdsNew/view.inc.php in Albasoftware Phpauction 2.1 and possibly later versions, with phpAdsNew 2.0.5, allows remote attackers to execute arbitrary PHP code via a URL in the phpAds_path parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 | |
| Application | 1 |
Exploit-Db
| description | PHPAuction 2.1 (phpAds_path) Remote File Inclusion Vulnerability. CVE-2006-3984. Webapps exploit for php platform |
| file | exploits/php/webapps/2100.txt |
| id | EDB-ID:2100 |
| last seen | 2016-01-31 |
| modified | 2006-08-01 |
| platform | php |
| port | |
| published | 2006-08-01 |
| reporter | Philipp Niedziela |
| source | https://www.exploit-db.com/download/2100/ |
| title | PHPAuction 2.1 phpAds_path Remote File Inclusion Vulnerability |
| type | webapps |
References
- http://securityreason.com/securityalert/1320
- http://securityreason.com/securityalert/1320
- http://www.bb-pcsecurity.de/sicherheit_264.htm
- http://www.bb-pcsecurity.de/sicherheit_264.htm
- http://www.securityfocus.com/archive/1/441716/100/0/threaded
- http://www.securityfocus.com/archive/1/441716/100/0/threaded
- http://www.securityfocus.com/bid/19254
- http://www.securityfocus.com/bid/19254
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28110
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28110
- https://www.exploit-db.com/exploits/2100
- https://www.exploit-db.com/exploits/2100