CoreCVE
Back

HIGH

PHP remote file inclusion vulnerability in conf.php in WoWRoster (aka World of Warcraft Roster) 1.5.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter

Published Aug 5, 2006

Description

PHP remote file inclusion vulnerability in conf.php in WoWRoster (aka World of Warcraft Roster) 1.5.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the subdir parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Aug 5, 2006
Updated Aug 7, 2024
Reserved Aug 4, 2006
Link CVE-2006-3998
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 16, 2026
Link CVE-2006-3998
Red Hat
Severity n/a
Public date n/a
Links CVE-2006-3998
ENISA EUVD
Assigner mitre
Published Aug 5, 2006
Updated Aug 7, 2024
Exploited since n/a
Link EUVD-2006-3991
EUVD-2006-3991