CVE-2006-2129 Direct static code injection vulnerability in Pro Publish 2.0 allows remote authenticated administrators to execute arbitrary PHP code by editing certain settings, which are stored in set_inc.php.
MediumCVSS 5.5
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Direct static code injection vulnerability in Pro Publish 2.0 allows remote authenticated administrators to execute arbitrary PHP code by editing certain settings, which are stored in set_inc.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| deltascripts pro publish | = 2.0 | No fix listed |
References
- evuln.com
- 19882 third-party-advisory vendor-advisory
- 25128 vdb-entry
- 17762 vdb-entry
- ADV-2006-1578 vdb-entry
- propublish-setinc-file-include(26149) vdb-entry