Vulnerabilities > CVE-2006-3998 - Unspecified vulnerability in Wowroster 1.5/1.5.1
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN wowroster
exploit available
Summary
PHP remote file inclusion vulnerability in conf.php in WoWRoster (aka World of Warcraft Roster) 1.5.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |
Exploit-Db
| description | WoW Roster <= 1.5.1 (subdir) Remote File Include Vulnerability. CVE-2006-3998. Webapps exploit for php platform |
| file | exploits/php/webapps/2099.txt |
| id | EDB-ID:2099 |
| last seen | 2016-01-31 |
| modified | 2006-08-01 |
| platform | php |
| port | |
| published | 2006-08-01 |
| reporter | skulmatic |
| source | https://www.exploit-db.com/download/2099/ |
| title | WoW Roster <= 1.5.1 subdir Remote File Include Vulnerability |
| type | webapps |
References
- http://www.securityfocus.com/bid/19269
- http://www.securityfocus.com/bid/19269
- http://www.vupen.com/english/advisories/2006/3094
- http://www.vupen.com/english/advisories/2006/3094
- http://www.wowroster.net/Forums/viewtopic/t=333.html
- http://www.wowroster.net/Forums/viewtopic/t=333.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28101
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28101
- https://www.exploit-db.com/exploits/2099
- https://www.exploit-db.com/exploits/2099