CVE-2006-4648
published 2006-09-08CVE-2006-4648: PHP remote file inclusion vulnerability in bp_ncom.php in BinGo News (BP News) 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL…
PriorityP346high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
3.35%
87.2th percentile
PHP remote file inclusion vulnerability in bp_ncom.php in BinGo News (BP News) 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the bnrep parameter.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| bingo_news | bingo_news | <= 3.01 | — |
| bingo_news | bingo_news | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-fcf2-f3gq-w5jr: PHP remote file inclusion vulnerability in bn_smrep1
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2007-0145 [HIGH] GHSA-fcf2-f3gq-w5jr: PHP remote file inclusion vulnerability in bn_smrep1
PHP remote file inclusion vulnerability in bn_smrep1.php in BinGoPHP News (BP News) 3.01 allows remote attackers to execute arbitrary PHP code via a URL in the bnrep parameter, a different vector than CVE-2006-4648 and CVE-2006-4649.
GHSA
GHSA-693r-q7g9-4cj5: PHP remote file inclusion vulnerability in bp_ncom
ghsa_unreviewed·2022-05-01
CVE-2006-4648 [HIGH] GHSA-693r-q7g9-4cj5: PHP remote file inclusion vulnerability in bp_ncom
PHP remote file inclusion vulnerability in bp_ncom.php in BinGo News (BP News) 3.01 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the bnrep parameter.
No detection rules found.
Exploit-DB
Elxis CMS 2008.1 - '/modules/mod_language.php' Multiple Cross-Site Scripting Vulnerabilities
exploitdb·2008-10-14
CVE-2008-4648 Elxis CMS 2008.1 - '/modules/mod_language.php' Multiple Cross-Site Scripting Vulnerabilities
Elxis CMS 2008.1 - '/modules/mod_language.php' Multiple Cross-Site Scripting Vulnerabilities
---
source: https://www.securityfocus.com/bid/31764/info
Elxis CMS is prone to multiple cross-site scripting and session-fixation vulnerabilities because it fails to sufficiently sanitize user-supplied data. The application is also prone to a session-fixation vulnerability.
An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the attacker to steal cookie-based authentication credentials and to launch other attacks.
Using the session-fixation issue, the attacker can hijack the session and gain unauthorized access to the affected application.
Elxis CMS 2006.1 is vulnerable; other version
Exploit-DB
BinGo News 3.01 - 'bnrep' Remote File Inclusion
exploitdb·2006-09-06
CVE-2006-4649 BinGo News 3.01 - 'bnrep' Remote File Inclusion
BinGo News 3.01 - 'bnrep' Remote File Inclusion
---
#==============================================================================================
#BinGo News <= v3.01 (bnrep) Remote File Inclusion Exploit
#===============================================================================================
#
#Critical Level : Dangerous
#
#Venedor site : http://bingophp.free.fr/BinGoPHPnewslast_full.zip
#
#Version : v3.01
#
#================================================================================================
#
#Dork : ""Script réalisé par BinGo PHP""
#
#================================================================================================
#Bug in : bp_ncom.php
#
#Vlu Code :
#--------------------------------
# include $bnrep."bn_configs.php";
#
#==========================
No writeups or analysis indexed.
http://secunia.com/advisories/21804http://securitytracker.com/id?1016811http://www.securityfocus.com/archive/1/445506/100/0/threadedhttp://www.securityfocus.com/bid/19877http://www.vupen.com/english/advisories/2006/3494https://exchange.xforce.ibmcloud.com/vulnerabilities/28769https://www.exploit-db.com/exploits/2312http://secunia.com/advisories/21804http://securitytracker.com/id?1016811http://www.securityfocus.com/archive/1/445506/100/0/threadedhttp://www.securityfocus.com/bid/19877http://www.vupen.com/english/advisories/2006/3494https://exchange.xforce.ibmcloud.com/vulnerabilities/28769https://www.exploit-db.com/exploits/2312
2006-09-08
Published