CVE-2006-3964 - PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the cfg_root parameter

Back Back to CVE browser

HIGH

PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the cfg_root parameter

Published Aug 1, 2006

7.5

HIGH

CVSS 2.0

EPSS 2.31%

Description

PHP remote file inclusion vulnerability in members.php in Banex PHP MySQL Banner Exchange 2.21 allows remote attackers to execute arbitrary PHP code via a URL in the cfg_root parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (2)

http://marc.info/?l=full-disclosure&m=115423462216111&w=2
mailing-listx_refsource_FULLDISC
http://www.securityfocus.com/bid/19240
vdb-entryx_refsource_BIDExploit

Link	Providers	Tags
http://marc.info/?l=full-disclosure&m=115423462216111&w=2		mailing-listx_refsource_FULLDISC
http://www.securityfocus.com/bid/19240		vdb-entryx_refsource_BIDExploit

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 1, 2006

Updated Aug 7, 2024

Reserved Aug 1, 2006

Link CVE-2006-3964

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-3964

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-3964