CVE-2006-3754 PHP remote file inclusion vulnerability in Include/editor/rich_files/class.rich.php in FlushCMS 1.0.0-pre2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the class_path...
HighCVSS 7.5
EPSS 2.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in Include/editor/rich_files/class.rich.php in FlushCMS 1.0.0-pre2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the class_path parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flushcms | <= 1.0_pre2 | No fix listed |
References
- 21090 third-party-advisory vendor-advisory
- 19023 exploit vdb-entry
- ADV-2006-2822 vdb-entry
- flushcms-classpath-file-include(27751) vdb-entry
- 2018 exploit