CVE-2006-4240 - PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter

Back Back to CVE browser

HIGH

PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter

Published Aug 21, 2006

7.5

HIGH

CVSS 2.0

EPSS 3.25%

Description

PHP remote file inclusion vulnerability in index.php in Fusion News 3.7 allows remote attackers to execute arbitrary PHP code via a URL in the fpath parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://archives.neohapsis.com/archives/bugtraq/2006-08/0317.html
mailing-listx_refsource_BUGTRAQExploitVendor Advisory
http://securityreason.com/securityalert/1420
third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1016701
vdb-entryx_refsource_SECTRACKExploit
http://www.securityfocus.com/bid/19546
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/3298
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/28400
vdb-entryx_refsource_XF

Link	Providers	Tags
http://archives.neohapsis.com/archives/bugtraq/2006-08/0317.html		mailing-listx_refsource_BUGTRAQExploitVendor Advisory
http://securityreason.com/securityalert/1420		third-party-advisoryx_refsource_SREASON
http://securitytracker.com/id?1016701		vdb-entryx_refsource_SECTRACKExploit
http://www.securityfocus.com/bid/19546		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/3298		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/28400		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Aug 21, 2006

Updated Aug 7, 2024

Reserved Aug 21, 2006

Link CVE-2006-4240

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-4240

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-4240