Vulnerabilities > CVE-2006-5948 - Remote File Include vulnerability in Ringsworld PHPpeanuts 1.1

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
ringsworld
exploit available
NVD
Published: 2006-11-17
Updated: 2017-10-19

Summary

PHP remote file inclusion vulnerability in pntUnit/Inspect.php in phpPeanuts 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the Include parameter. Please see the vendor site below for the appropriate patch in rsponse to this vulnerability: http://www.phppeanuts.org/site/index_php/Menu/23/Download.html

Vulnerable Configurations

Part Description Count
Application
Ringsworld
1

Exploit-Db

descriptionphpPeanuts 1.3 Beta (Inspect.php) Remote File Include Vulnerability. CVE-2006-5948. Webapps exploit for php platform
fileexploits/php/webapps/2778.txt
idEDB-ID:2778
last seen2016-01-31
modified2006-11-14
platformphp
port
published2006-11-14
reporterHidayat Sagita
sourcehttps://www.exploit-db.com/download/2778/
titlephpPeanuts 1.3 Beta Inspect.php Remote File Include Vulnerability
typewebapps

References