CVE-2006-4329
published 2006-08-24CVE-2006-4329: Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG (Pre-Alpha) 0.0.5b and earlier allow remote attackers to execute arbitrary PHP code…
PriorityP345high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
7.83%
93.9th percentile
Multiple PHP remote file inclusion vulnerabilities in Shadows Rising RPG (Pre-Alpha) 0.0.5b and earlier allow remote attackers to execute arbitrary PHP code via a URL in the CONFIG[gameroot] parameter to (1) core/includes/security.inc.php, (2) core/includes/smarty.inc.php, (3) qcms/includes/smarty.inc.php or (4) qlib/smarty.inc.php.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| shadows_rising_rpg | shadows_rising_rpg | <= 0.0.5b_pre-alpha | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://www.attrition.org/pipermail/vim/2006-August/000986.htmlhttp://www.osvdb.org/28282http://www.osvdb.org/28283http://www.securityfocus.com/bid/19608https://exchange.xforce.ibmcloud.com/vulnerabilities/28478https://www.exploit-db.com/exploits/2229http://www.attrition.org/pipermail/vim/2006-August/000986.htmlhttp://www.osvdb.org/28282http://www.osvdb.org/28283http://www.securityfocus.com/bid/19608https://exchange.xforce.ibmcloud.com/vulnerabilities/28478https://www.exploit-db.com/exploits/2229
2006-08-24
Published