CVE-2006-6863

Summary

PHP remote file inclusion vulnerability in the Enigma2 plugin (Enigma2.php) in Enigma WordPress Bridge allows remote attackers to execute arbitrary PHP code via a URL in the boarddir parameter. NOTE: CVE disputes this issue, since $boarddir is set to a fixed value

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://www.exploit-db.com/exploits/3051
• http://www.attrition.org/pipermail/vim/2007-January/001207.html
• http://securityreason.com/securityalert/2093
• http://www.securityfocus.com/archive/1/455555/100/0/threaded
• http://securitytracker.com/id?017459
• http://www.securityfocus.com/bid/21826

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: yes
  • Technical Impact: total

References

• https://www.exploit-db.com/exploits/3051
• http://www.attrition.org/pipermail/vim/2007-January/001207.html
• http://securityreason.com/securityalert/2093
• http://www.securityfocus.com/archive/1/455555/100/0/threaded
• http://securitytracker.com/id?017459
• http://www.securityfocus.com/bid/21826

• ←Previous
• Next→