Back to feed
EUVD-2006-2150 · Published May 3, 2006
PHP remote file inclusion vulnerability in sources/lostpw.php in Aardvark Topsites PHP 4.2.2 and earlier, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via the CONFIG[path] parameter, as demonstrated by including a GIF that contains PHP code.
Technologies
Avatic Aardvark Topsites Php
Weaknesses
NVD-CWE-Other
CVSS scores
- v2.06.4
AV:N/AC:L/Au:N/C:P/I:P/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
