CVE-2006-6976 - PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.2 and earlier allows remote attackers to execute arbitrary code via a URL in the absolute_path parameter

Back Back to CVE browser

HIGH

PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.2 and earlier allows remote attackers to execute arbitrary code via a URL in the absolute_path parameter

Published Feb 8, 2007

7.5

HIGH

CVSS 2.0

EPSS 4.14%

Description

PHP remote file inclusion vulnerability in centipaid_class.php in CentiPaid 1.4.2 and earlier allows remote attackers to execute arbitrary code via a URL in the absolute_path parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (3)

http://www.attrition.org/pipermail/vim/2007-February/001296.html
mailing-listx_refsource_VIMExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/29564
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2555
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://www.attrition.org/pipermail/vim/2007-February/001296.html		mailing-listx_refsource_VIMExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/29564		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/2555		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 8, 2007

Updated Aug 7, 2024

Reserved Feb 8, 2007

Link CVE-2006-6976

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-6976

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-6976