Vulnerabilities > CVE-2006-7018 - Unspecified vulnerability in Oliver Georgi PHPwcms

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
oliver-georgi
NVD
Published: 2007-02-15
Updated: 2024-11-21

Summary

phpwcms 1.2.5-DEV and earlier, and 1.1 before RC4, allows remote attackers to execute arbitrary code via a crafted argument to the nome_evento parameter to phpwcms_code_snippets/mail_file_form.php and (2) sample_ext_php/mail_file_form.php, which is processed by the render_PHPcode function.

Vulnerable Configurations

Part Description Count
Application
Oliver_Georgi
1

References