CVE-2006-2998 - CVE Reference - Advisories

CVE Reference: CVE-2006-2998

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-2998

Description: PHP remote file inclusion vulnerability in board/post.php in free QBoard 1.1 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the qb_path parameter.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/27040 SAID Secunia Advisory: SA20569 MISC http://milw0rm.com/exploits/1899 BID 18373

Return to the previous page.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Sun Solaris Kernel Covert Channel Security Bypass

2.	HP TCP/IP Services for OpenVMS Finger Format String Vulnerability

3.	dotProject SQL Injection and Cross-Site Scripting

4.	Novell eDirectory Multiple Vulnerabilities

5.	PluggedOut Blog "index.php" SQL Injection Vulnerabilities

6.	Slackware update for amarok

7.	phpBB "gen_rand_strin g()" Predictable RNG Weakness

8.	Adium MSN SLP Message Integer Overflow Vulnerabilities

9.	Blogn Cross-Site Scripting and Cross-Site Request Forgery

10.	Acoustica Mixcraft ".mx4" File Processing Buffer Overflow