Vulnerabilities > CVE-2006-4278 - Remote File Include vulnerability in Sportsphool 1.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
sportsphool
exploit available
NVD
Published: 2006-08-21
Updated: 2017-10-19

Summary

PHP remote file inclusion vulnerability in includes/layout/plain.footer.php in SportsPHool 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the mainnav parameter.

Vulnerable Configurations

Part Description Count
Application
Sportsphool
1

Exploit-Db

  • descriptionSportsPHool <= 1.0 (mainnav) Remote File Include Vulnerability. CVE-2006-4278. Webapps exploit for php platform
    fileexploits/php/webapps/2227.txt
    idEDB-ID:2227
    last seen2016-01-31
    modified2006-08-20
    platformphp
    port
    published2006-08-20
    reporterKacper
    sourcehttps://www.exploit-db.com/download/2227/
    titleSportsPHool <= 1.0 mainnav Remote File Include Vulnerability
    typewebapps
  • descriptionSports PHool <= 1.0 - Remote File Include Exploit. CVE-2006-4278. Webapps exploit for php platform
    idEDB-ID:18018
    last seen2016-02-02
    modified2011-10-21
    published2011-10-21
    reportercr4wl3r
    sourcehttps://www.exploit-db.com/download/18018/
    titleSports PHool <= 1.0 - Remote File Include Exploit

References