Secunia Logo
 
CVE Reference: CVE-2006-5131
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2006-5131

Description:
module/shout/jafshout.php (aka the shoutbox) in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allows remote attackers to execute arbitrary code within sections bounded by "<?php" and "?>", possibly due to a static code injection vulnerability involving admin/data_inc.php.

CVE Status:
Candidate

References:

SREASON
  http://securityreason.com/securityalert/1674

SAID
  Secunia Advisory: SA22143

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/447081/100/0/threaded


Return to the previous page.