Vulnerabilities > CVE-2006-7185 - Remote Security vulnerability in Cmsmelborp Beta

047910
CVSS 9.3 - CRITICAL
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
cmsmelborp
critical
exploit available
NVD
Published: 2007-03-30
Updated: 2017-10-11

Summary

PHP remote file inclusion vulnerability in includes/user_standard.php in CMSmelborp Beta allows remote attackers to execute arbitrary PHP code via a URL in the relative_root parameter.

Vulnerable Configurations

Part Description Count
Application
Cmsmelborp
1

Exploit-Db

descriptionCMSmelborp Beta (user_standard.php) Remote File Include Exploit. CVE-2006-7185. Webapps exploit for php platform
fileexploits/php/webapps/2766.pl
idEDB-ID:2766
last seen2016-01-31
modified2006-11-12
platformphp
port
published2006-11-12
reporterDeltahackingTEAM
sourcehttps://www.exploit-db.com/download/2766/
titleCMSmelborp Beta user_standard.php Remote File Include Exploit
typewebapps

References