CVE-2006-4669 PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in th...
MediumCVSS 5.1
EPSS 3.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in admin/system/include.php in Somery 0.4.6 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the skindir parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| somery | <= 0.4.6 | No fix listed |
References
- 21825 third-party-advisory vendor-advisory
- 19912 vdb-entry
- ADV-2006-3516 vdb-entry
- somery-include-file-include(28816) vdb-entry
- 2329 exploit