CVE-2006-5102
published 2006-10-03CVE-2006-5102: PHP remote file inclusion vulnerability in include/editfunc.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 and earlier allows remote…
PriorityP345high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
2.94%
85.4th percentile
PHP remote file inclusion vulnerability in include/editfunc.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NWCONF_SYSTEM[server_path] parameter.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| baumedia | newswriter | <= 1.42 | — |
| baumedia | newswriter | — | — |
| baumedia | newswriter | — | — |
| baumedia | newswriter | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-j262-rqcc-8w59: PHP remote file inclusion vulnerability in include/main
ghsa_unreviewed·2022-05-01·CVSS 7.5
CVE-2006-5180 [HIGH] GHSA-j262-rqcc-8w59: PHP remote file inclusion vulnerability in include/main
PHP remote file inclusion vulnerability in include/main.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NWCONF_SYSTEM[server_path] parameter, a different vector than CVE-2006-5102.
GHSA
GHSA-wgp8-6jf5-fmcv: PHP remote file inclusion vulnerability in include/editfunc
ghsa_unreviewed·2022-05-01
CVE-2006-5102 [HIGH] GHSA-wgp8-6jf5-fmcv: PHP remote file inclusion vulnerability in include/editfunc
PHP remote file inclusion vulnerability in include/editfunc.inc.php in Sebastian Baumann and Philipp Wolfer Newswriter SW 1.42 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the NWCONF_SYSTEM[server_path] parameter.
No detection rules found.
No writeups or analysis indexed.
http://osvdb.org/37965http://www.securityfocus.com/bid/20237http://www.vupen.com/english/advisories/2006/3816https://exchange.xforce.ibmcloud.com/vulnerabilities/29200https://www.exploit-db.com/exploits/2439http://osvdb.org/37965http://www.securityfocus.com/bid/20237http://www.vupen.com/english/advisories/2006/3816https://exchange.xforce.ibmcloud.com/vulnerabilities/29200https://www.exploit-db.com/exploits/2439
2006-10-03
Published