CVE-2006-3527 Multiple PHP remote file inclusion vulnerabilities in BosClassifieds Classified Ads allow remote attackers to execute arbitrary PHP code via a URL in the insPath parameter to (1) index.php, (2) recent...
HighCVSS 7.5
EPSS 4.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple PHP remote file inclusion vulnerabilities in BosClassifieds Classified Ads allow remote attackers to execute arbitrary PHP code via a URL in the insPath parameter to (1) index.php, (2) recent.php, (3) account.php, (4) classified.php, or (5) search.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bosdev bosclassifieds classified ads | All versions | No fix listed |
References
- 21056 third-party-advisory
- 1016447 exploit vdb-entry
- www.jaascois.com url-repurposed
- 27314 vdb-entry
- 27315 vdb-entry
- 27316 vdb-entry
- 27317 vdb-entry
- 27318 vdb-entry
- 18883 exploit vdb-entry
- ADV-2006-2807 vdb-entry
- bosclassifieds-multiple-scripts-file-include(27662) vdb-entry