CVE-2006-2686

State: Published
Severity: Not scored
Published: May 31, 2006
Updated: Aug 7, 2024
Reserved: May 30, 2006

Description

PHP remote file inclusion vulnerabilities in ActionApps 2.8.1 allow remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[AA_INC_PATH] parameter in (1) cached.php3, (2) cron.php3, (3) discussion.php3, (4) filldisc.php3, (5) filler.php3, (6) fillform.php3, (7) go.php3, (8) hiercons.php3, (9) jsview.php3, (10) live_checkbox.php3, (11) offline.php3, (12) post2shtml.php3, (13) search.php3, (14) slice.php3, (15) sql_update.php3, (16) view.php3, (17) multiple files in the (18) admin/ folder, (19) includes folder, and (20) modules/ folder.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

27308vdb-entry
27289vdb-entry
27304vdb-entry
27269vdb-entry
27256vdb-entry
1829exploit
27275vdb-entry
27270vdb-entry
27292vdb-entry
actionapps-globals-file-include(26776)vdb-entry
ADV-2006-1997vdb-entry
27305vdb-entry
27272vdb-entry
27278vdb-entry
27294vdb-entry
27273vdb-entry
27287vdb-entry
27274vdb-entry
27284vdb-entry
27253vdb-entry
27276vdb-entry
27306vdb-entry
27263vdb-entry
27298vdb-entry
27295vdb-entry
27271vdb-entry
27288vdb-entry
27310vdb-entry
27264vdb-entry
27262vdb-entry
27257vdb-entry
27259vdb-entry
27280vdb-entry
20299third-party-advisory
27309vdb-entry
27291vdb-entry
27267vdb-entry
27281vdb-entry
27282vdb-entry
27301vdb-entry
27254vdb-entry
27268vdb-entry
27258vdb-entry
27299vdb-entry
27300vdb-entry
27297vdb-entry
27285vdb-entry
27286vdb-entry
27296vdb-entry
27303vdb-entry
27279vdb-entry
27277vdb-entry
19133vdb-entry
27283vdb-entry
27261vdb-entry
27302vdb-entry
27260vdb-entry
27266vdb-entry
27290vdb-entry
27293vdb-entry
27265vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.