Vulnerabilities > CVE-2006-4489 - Unspecified vulnerability in Ultrize Minibill

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
ultrize
exploit available
NVD
Published: 2006-08-31
Updated: 2024-11-21

Summary

Multiple PHP remote file inclusion vulnerabilities in MiniBill 2006-07-14 (1.2.2) allow remote attackers to execute arbitrary PHP code via (1) a URL in the config[include_dir] parameter in actions/ipn.php or (2) an FTP path in the config[plugin_dir] parameter in include/initPlugins.php.

Vulnerable Configurations

Part Description Count
Application
Ultrize
1

Exploit-Db

descriptionMiniBill <= 1.22b config[plugin_dir] Remote File Inclusion Vulnerabilities. CVE-2006-4489. Webapps exploit for php platform
fileexploits/php/webapps/2272.txt
idEDB-ID:2272
last seen2016-01-31
modified2006-08-29
platformphp
port
published2006-08-29
reporterthe master
sourcehttps://www.exploit-db.com/download/2272/
titleMiniBill <= 1.22b - configplugin_dir Remote File Inclusion Vulnerabilities
typewebapps

References