CVE-2006-4921 - PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to starnet/modules/include/include.php

Back Back to CVE browser

HIGH

PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to starnet/modules/include/include.php

Published Sep 21, 2006

7.5

HIGH

CVSS 2.0

EPSS 6.96%

Description

PHP remote file inclusion vulnerability in Site@School (S@S) 2.4.03 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cmsdir parameter to starnet/modules/include/include.php. NOTE: some of these details are obtained from third party information.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (6)

http://marc.info/?l=bugtraq&m=115869368313367&w=2
mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/21975
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1016887
vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/28941
vdb-entryx_refsource_OSVDB
http://www.vupen.com/english/advisories/2006/3664
vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-4908
Advisory

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=115869368313367&w=2		mailing-listx_refsource_BUGTRAQ
http://secunia.com/advisories/21975		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://securitytracker.com/id?1016887		vdb-entryx_refsource_SECTRACK
http://www.osvdb.org/28941		vdb-entryx_refsource_OSVDB
http://www.vupen.com/english/advisories/2006/3664		vdb-entryx_refsource_VUPEN
https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-4908		Advisory