CVE-2010-1106 - PHP remote file inclusion vulnerability in cgi/index.php in AdvertisementManager 3.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the req parameter

Back Back to CVE browser

HIGH

PHP remote file inclusion vulnerability in cgi/index.php in AdvertisementManager 3.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the req parameter

Published Mar 25, 2010

7.5

HIGH

CVSS 2.0

EPSS 2.10%

Description

PHP remote file inclusion vulnerability in cgi/index.php in AdvertisementManager 3.1.0 allows remote attackers to execute arbitrary PHP code via a URL in the req parameter. NOTE: this can also be leveraged to include and execute arbitrary local files via .. (dot dot) sequences.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-94

Code Injection

References (2)

http://www.packetstormsecurity.com/1001-exploits/advertisemanager-xssrfitraversal.txt
x_refsource_MISCExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/55756
vdb-entryx_refsource_XF

Link	Providers	Tags
http://www.packetstormsecurity.com/1001-exploits/advertisemanager-xssrfitraversal.txt		x_refsource_MISCExploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/55756		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 25, 2010

Updated Aug 7, 2024

Reserved Mar 25, 2010

Link CVE-2010-1106

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2010-1106

Red Hat

Severity n/a

Public date n/a

Links CVE-2010-1106