Vulnerabilities > CVE-2006-4870 - Remote File Include vulnerability in Aewebworks Aedating 4.0

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
aewebworks
exploit available
NVD
Published: 2006-09-19
Updated: 2017-10-19

Summary

Multiple PHP remote file inclusion vulnerabilities in AEDating 4.1, and possibly earlier versions, allow remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter in (1) inc/design.inc.php or (2) inc/admin_design.inc.php.

Vulnerable Configurations

Part Description Count
Application
Aewebworks
2

Exploit-Db

descriptionaeDating <= 4.1 dir[inc] Remote File Include Vulnerabilities. CVE-2006-4870. Webapps exploit for php platform
fileexploits/php/webapps/2377.txt
idEDB-ID:2377
last seen2016-01-31
modified2006-09-16
platformphp
port
published2006-09-16
reporterNeXtMaN
sourcehttps://www.exploit-db.com/download/2377/
titleaeDating <= 4.1 - dirinc Remote File Include Vulnerabilities
typewebapps

References