CVE-2006-5249 PHP remote file inclusion vulnerability in tagmin/delTagUser.php in TagIt! Tagboard 2.1.B Build 2 (tagit2b) allows remote attackers to execute arbitrary PHP code via a URL in the configpath parameter.
HighCVSS 7.5
EPSS 3.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
PHP remote file inclusion vulnerability in tagmin/delTagUser.php in TagIt! Tagboard 2.1.B Build 2 (tagit2b) allows remote attackers to execute arbitrary PHP code via a URL in the configpath parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tagit tagboard | = 2.1.b_build_2 | No fix listed |
References
- 1714 third-party-advisory
- 1017045 vdb-entry
- 20061011 Source VERIFY of tagit2b delTagUser.php RFI mailing-list
- 20061010 tagit2b -- Remote File Inclusion mailing-list
- 20451 vdb-entry
- tagit-deltaguser-file-include(29430) vdb-entry