CVE-2006-0791 PHP remote file inclusion vulnerability in index.php in DreamCost HostAdmin allows remote attackers to include arbitrary files via the $path variable, which is not initialized before use.
HighCVSS 7.5
EPSS 7.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP remote file inclusion vulnerability in index.php in DreamCost HostAdmin allows remote attackers to include arbitrary files via the $path variable, which is not initialized before use.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dreamcost hostadmin | = 3.0 | No fix listed |
References
- 20060215 HostAdmin - Remote Command Execution Vulnerability mailing-list
- 18901 third-party-advisory vendor-advisory
- 1016273 vdb-entry
- 23241 vdb-entry
- 20060605 [MajorSecurity #9]HostAdmin <= 3.1 - Remote File Include Vulnerability mailing-list
- 20081007 HostAdmin 3.* Remote File Include Vulnerabilities mailing-list
- 20081007 Re: HostAdmin 3.* Remote File Include Vulnerabilities mailing-list
- 16682 exploit vdb-entry
- ADV-2006-0618 vdb-entry
- www.xorcrew.net exploit vendor-advisory
- hostadmin-path-file-include(24723) vdb-entry