CVE-2006-5495 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-5495
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-5495

Description: Multiple PHP remote file inclusion vulnerabilities in Trawler Web CMS 1.8.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) path_red2 parameter to (a) _msdazu_pdata/redaktion/artikel/up/index.php; (b) addtort.php, (c) colorpik2.php, (d) colorpik3.php, (e) extras_menu.php, (f) farbpalette.php, (g) lese_inc.php, and (h) newfile.php in _msdazu_share/richtext/; the (2) path_scr_dat2 parameter to (i)_msdazu_share/share/insert1.php; the (3) path_red parameter to (j) _msdazu_share/extras/downloads/index.php; and unspecified parameters in other files.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/29715 ST 1017111 SAID Secunia Advisory: SA22525 OSVDB 29960 29961 29962 29963 29964 29965 29966 29967 29968 29969 MISC http://milw0rm.com/exploits/2611 http://cmsblog.msdazu.de/?p=209 BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/449459/100/0/threaded BID 20678 20662

Return to the previous page.