CVE-2006-6417
published 2006-12-10CVE-2006-6417: PHP remote file inclusion vulnerability in inc/CONTROL/import/import-mt.php in b2evolution 1.8.5 through 1.9 beta allows remote attackers to execute arbitrary…
PriorityP344high7.5CVSS 2.0
AVNACLAuNCPIPAP
EXPLOIT
EPSS
3.27%
86.9th percentile
PHP remote file inclusion vulnerability in inc/CONTROL/import/import-mt.php in b2evolution 1.8.5 through 1.9 beta allows remote attackers to execute arbitrary PHP code via a URL in the inc_path parameter.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| b2evolution | b2evolution | — | — |
| b2evolution | b2evolution | — | — |
| b2evolution | b2evolution | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/23346http://securityreason.com/securityalert/2006http://www.securityfocus.com/archive/1/452998/100/100/threadedhttp://www.securityfocus.com/bid/21332http://www.vupen.com/english/advisories/2006/4938https://exchange.xforce.ibmcloud.com/vulnerabilities/30580https://tiifp.org/tarkus/advisories/b2evolution111106_01.txthttp://secunia.com/advisories/23346http://securityreason.com/securityalert/2006http://www.securityfocus.com/archive/1/452998/100/100/threadedhttp://www.securityfocus.com/bid/21332http://www.vupen.com/english/advisories/2006/4938https://exchange.xforce.ibmcloud.com/vulnerabilities/30580https://tiifp.org/tarkus/advisories/b2evolution111106_01.txt
2006-12-10
Published