Vulnerabilities > CVE-2006-4545 - Unspecified vulnerability in Modulebased CMS Modulebased CMS Prealpha
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN modulebased-cms
exploit available
Summary
PHP remote file inclusion vulnerability in ModuleBased CMS Pre-Alpha allows remote attackers to execute arbitrary PHP code via the _SERVER parameter in (1) admin/avatar.php, (2) libs/archive.class.php, (3) libs/login.php, (4) libs/profiles.class.php, and (5) libs/profile/proccess.php. NOTE: CVE disputes this claim, as the _SERVER array and the _SERVER[DOCUMENT_ROOT] index are controlled by PHP and cannot be manipulated by an attacker
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | ModuleBased CMS Multiple Remote File Include Vulnerabilities. CVE-2006-4545. Webapps exploit for php platform |
| id | EDB-ID:28440 |
| last seen | 2016-02-03 |
| modified | 2006-08-29 |
| published | 2006-08-29 |
| reporter | sCORPINo |
| source | https://www.exploit-db.com/download/28440/ |
| title | ModuleBased CMS - Multiple Remote File Include Vulnerabilities |