CVE-2006-4156
published 2006-08-16CVE-2006-4156: PHP remote file inclusion vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in…
PriorityP337high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
2.43%
82.2th percentile
PHP remote file inclusion vulnerability in big.php in pearlabs mafia moblog 6 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the pathtotemplate parameter. NOTE: a third party claims that the researcher is incorrect, because template.php defines pathtotemplate before big.php uses pathtotemplate. CVE has not verified either claim, but during August 2006, the original researcher made several significant errors regarding this bug type
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| pearlabs | mafia_moblog | <= 6 | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://securityreason.com/securityalert/1391http://www.securityfocus.com/archive/1/442867/100/0/threadedhttp://www.securityfocus.com/archive/1/443153/100/0/threadedhttp://www.securityfocus.com/bid/19458http://securityreason.com/securityalert/1391http://www.securityfocus.com/archive/1/442867/100/0/threadedhttp://www.securityfocus.com/archive/1/443153/100/0/threadedhttp://www.securityfocus.com/bid/19458
2006-08-16
Published