Vulnerabilities > CVE-2006-4050 - Remote File Include vulnerability in PHPAutoMembersArea Auto_Check_Renewals.PHP

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
david-walker
exploit available
NVD
Published: 2006-08-10
Updated: 2018-10-17

Summary

PHP remote file inclusion vulnerability in auto_check_renewals.php in phpAutoMembersArea (phpAMA) 3.2.4 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the installed_config_file parameter. This vulnerability is addressed in the following product release: David Walker, phpAutoMembersArea, 3.2.5

Vulnerable Configurations

Part Description Count
Application
David_Walker
5

Exploit-Db

descriptionphpAutoMembersArea <= 3.2.5 (installed_config_file) Remote Inclusion. CVE-2006-4050. Webapps exploit for php platform
idEDB-ID:2132
last seen2016-01-31
modified2006-08-07
published2006-08-07
reporterPhilipp Niedziela
sourcehttps://www.exploit-db.com/download/2132/
titlephpAutoMembersArea <= 3.2.5 installed_config_file Remote Inclusion

References