CVE-2006-5307 Multiple PHP remote file inclusion vulnerabilities in AFGB GUESTBOOK 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the Htmls parameter in (1) add.php, (2) admin.php, (3) look.p...
HighCVSS 7.5
EPSS 9.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple PHP remote file inclusion vulnerabilities in AFGB GUESTBOOK 2.2 allow remote attackers to execute arbitrary PHP code via a URL in the Htmls parameter in (1) add.php, (2) admin.php, (3) look.php, or (4) re.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| afgb guestbook | = 2.2 | No fix listed |
References
- 22363 third-party-advisory vendor-advisory
- 29725 vdb-entry
- 29726 vdb-entry
- 29727 vdb-entry
- 29728 vdb-entry
- 20503 exploit vdb-entry
- ADV-2006-4047 vdb-entry
- afgbguestbook-htmls-file-include(29511) vdb-entry
- 2529 exploit