CoreCVE
Back

HIGH

PHP remote file inclusion vulnerability in manager/tools/link/dbinstall.php in Plume CMS 1.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the _PX_config[manager_path] parameter

Published Feb 15, 2007

Description

PHP remote file inclusion vulnerability in manager/tools/link/dbinstall.php in Plume CMS 1.1.3 allows remote attackers to execute arbitrary PHP code via a URL in the _PX_config[manager_path] parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (6)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner mitre
Published Feb 15, 2007
Updated Aug 7, 2024
Reserved Feb 14, 2007
Link CVE-2006-7021

CISA Vulnrichment

No data

NVD

Status Modified
Modified Jun 16, 2026
Link CVE-2006-7021

Red Hat

No data

ENISA EUVD

Assigner mitre
Published Feb 15, 2007
Updated Aug 7, 2024
Link EUVD-2006-7003

GitHub

No data