Vulnerabilities > CVE-2006-6552 - Remote Security vulnerability in PHP Blog CMS 4.1.3

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
php
exploit available
NVD
Published: 2006-12-14
Updated: 2017-10-19

Summary

PHP remote file inclusion vulnerability in admin/plugins/NP_UserSharing.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DIR_ADMIN parameter.

Vulnerable Configurations

Part Description Count
Application
Php
1

Exploit-Db

descriptionBLOG:CMS <= 4.1.3 (NP_UserSharing.php) Remote Inclusion Vulnerability. CVE-2006-6552. Webapps exploit for php platform
fileexploits/php/webapps/2923.txt
idEDB-ID:2923
last seen2016-01-31
modified2006-12-12
platformphp
port
published2006-12-12
reporterHACKERS PAL
sourcehttps://www.exploit-db.com/download/2923/
titleBLOG:CMS <= 4.1.3 NP_UserSharing.php Remote Inclusion Vulnerability
typewebapps

References