CVE-2006-1919 - PHP remote file inclusion vulnerability in index.php in Internet Photoshow 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter

Back Back to CVE browser

HIGH

PHP remote file inclusion vulnerability in index.php in Internet Photoshow 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter

Published Apr 20, 2006

7.5

HIGH

CVSS 2.0

EPSS 3.79%

Description

PHP remote file inclusion vulnerability in index.php in Internet Photoshow 1.3 allows remote attackers to execute arbitrary PHP code via a URL in the page parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

http://secunia.com/advisories/19726
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.osvdb.org/24743
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/17620
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/1417
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1919
Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25937
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/1694
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://secunia.com/advisories/19726		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.osvdb.org/24743		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/17620		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/1417		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-1919		Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/25937		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/1694		exploitx_refsource_EXPLOIT-DB