CVE-2006-5495
- State
- Published
- Severity
- Not scored
- Published
- Oct 25, 2006
- Updated
- Aug 7, 2024
- Reserved
- Oct 24, 2006
Description
Multiple PHP remote file inclusion vulnerabilities in Trawler Web CMS 1.8.1 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the (1) path_red2 parameter to (a) _msdazu_pdata/redaktion/artikel/up/index.php; (b) addtort.php, (c) colorpik2.php, (d) colorpik3.php, (e) extras_menu.php, (f) farbpalette.php, (g) lese_inc.php, and (h) newfile.php in _msdazu_share/richtext/; the (2) path_scr_dat2 parameter to (i)_msdazu_share/share/insert1.php; the (3) path_red parameter to (j) _msdazu_share/extras/downloads/index.php; and unspecified parameters in other files.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 29963vdb-entry
- 29968vdb-entry
- 29964vdb-entry
- 29960vdb-entry
- 20678vdb-entry
- 22525third-party-advisory
- 2611exploit
- 1017111vdb-entry
- 29961vdb-entry
- 29966vdb-entry
- http://cmsblog.msdazu.de/?p=209
- 29969vdb-entry
- trawler-pathred-file-include(29715)vdb-entry
- 29962vdb-entry
- ADV-2006-4152vdb-entry
- 20662vdb-entry
- 29965vdb-entry
- 20061021 trawler <= 1.8.1 Remote File Inclusionmailing-list
- 29967vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.