Vulnerabilities > CVE-2006-6878 - Unspecified vulnerability in PHP-Update
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
admin/uploads.php in PHP-Update 2.7 and earlier allows remote attackers to gain privileges by setting the rights[7] parameter to 1 during a login action.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Exploit-Db
description | PHP-Update <= 2.7 (admin/uploads.php) Remote Code Execution Exploit. CVE-2006-6878,CVE-2006-6879. Webapps exploit for php platform |
file | exploits/php/webapps/3020.pl |
id | EDB-ID:3020 |
last seen | 2016-01-31 |
modified | 2006-12-26 |
platform | php |
port | |
published | 2006-12-26 |
reporter | undefined1_ |
source | https://www.exploit-db.com/download/3020/ |
title | PHP-Update <= 2.7 admin/uploads.php Remote Code Execution Exploit |
type | webapps |