Vulnerabilities > CVE-2006-5070 - Remote File Include vulnerability in faceStones Personal Fs_Forms_Links.PHP

047910
CVSS 5.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
HIGH
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
high complexity
facestones
exploit available
NVD
Published: 2006-09-28
Updated: 2017-10-19

Summary

PHP remote file inclusion vulnerability in fsl2/objects/fs_form_links.php in faceStones Personal 2.0.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[fsinit][objpath] parameter. Successful exploitation requires that "register_globals" is enabled.

Vulnerable Configurations

Part Description Count
Application
Facestones
1

Exploit-Db

descriptionfaceStones personal <= 2.0.42 (fs_form_links.php) File Include Vuln. CVE-2006-5070. Webapps exploit for php platform
fileexploits/php/webapps/2434.txt
idEDB-ID:2434
last seen2016-01-31
modified2006-09-25
platformphp
port
published2006-09-25
reporterSHiKaA
sourcehttps://www.exploit-db.com/download/2434/
titlefaceStones personal <= 2.0.42 - fs_form_links.php File Include Vuln
typewebapps

References