CVE-2006-6213
published 2006-12-01CVE-2006-6213: index.php in PEGames uses the extract function to overwrite critical variables, which allows remote attackers to conduct PHP remote file inclusion attacks via…
PriorityP339high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
2.56%
83.2th percentile
index.php in PEGames uses the extract function to overwrite critical variables, which allows remote attackers to conduct PHP remote file inclusion attacks via the abs_url parameter, which is later extracted to overwrite a previously uncontrolled value.
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://www.attrition.org/pipermail/vim/2006-November/001153.htmlhttp://www.securityfocus.com/bid/21266https://exchange.xforce.ibmcloud.com/vulnerabilities/30517https://www.exploit-db.com/exploits/2840http://www.attrition.org/pipermail/vim/2006-November/001153.htmlhttp://www.securityfocus.com/bid/21266https://exchange.xforce.ibmcloud.com/vulnerabilities/30517https://www.exploit-db.com/exploits/2840
2006-12-01
Published