Vulnerabilities > CVE-2006-4369 - Remote File Include vulnerability in Integramod Portal 2.0

047910
CVSS 2.6 - LOW
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
high complexity
integramod
exploit available
NVD
Published: 2006-08-26
Updated: 2018-10-17

Summary

Absolute path traversal vulnerability in includes/functions_portal.php in IntegraMOD Portal 2.x and earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via an absolute pathname in the phpbb_root_path parameter.

Vulnerable Configurations

Part Description Count
Application
Integramod
1

Exploit-Db

descriptionIntegramod Portal <= 2.x (functions_portal.php) Remote Include Exploit. CVE-2006-4368,CVE-2006-4369. Webapps exploit for php platform
fileexploits/php/webapps/2250.pl
idEDB-ID:2250
last seen2016-01-31
modified2006-08-23
platformphp
port
published2006-08-23
reporternukedx
sourcehttps://www.exploit-db.com/download/2250/
titleIntegramod Portal <= 2.x functions_portal.php Remote Include Exploit
typewebapps

References