CVE-2006-3755 PHP remote file inclusion vulnerability in Include/editor/class.rich.php in FlushCMS 1.0.0-pre2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the class_path parameter....
HighCVSS 7.5
EPSS 2.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in Include/editor/class.rich.php in FlushCMS 1.0.0-pre2 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the class_path parameter. NOTE: the provenance of this information is unknown; the details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| flushcms | <= 1.0_pre2 | No fix listed |
References
- 21090 third-party-advisory vendor-advisory
- ADV-2006-2822 vdb-entry
- flushcms-classpath-file-include(27751) vdb-entry