Vulnerabilities > CVE-2006-6586 - Unspecified vulnerability in Vblog A0.1Nonfunc
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN vblog
exploit available
Summary
Multiple PHP remote file inclusion vulnerabilities in Vortex Blog (vBlog, aka C12) a0.1_nonfunc allow remote attackers to execute arbitrary PHP code via a URL in the cfgProgDir parameter in (1) secure.php or (2) checklogin.php in admin/auth/.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Exploit-Db
| description | vBlog / C12 0.1 (cfgProgDir) Remote File Include Vulnerabilities. CVE-2006-6586. Webapps exploit for php platform |
| file | exploits/php/webapps/2740.txt |
| id | EDB-ID:2740 |
| last seen | 2016-01-31 |
| modified | 2006-11-08 |
| platform | php |
| port | |
| published | 2006-11-08 |
| reporter | DeltahackingTEAM |
| source | https://www.exploit-db.com/download/2740/ |
| title | vBlog / C12 0.1 cfgProgDir Remote File Include Vulnerabilities |
| type | webapps |