Unscored CVE-2006-1816 EUVD-2006-1816GHSA-gvq2-3x3w-qj42

PHP remote file inclusion vulnerability in VBulletin 3.5.1, 3.5.2, and 3.5.4 allows remote attackers to execute arbitrary code via a URL in…

Published Apr 18, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in VBulletin 3.5.1, 3.5.2, and 3.5.4 allows remote attackers to execute arbitrary code via a URL in the systempath parameter to (1) ImpExModule.php, (2) ImpExController.php, and (3) ImpExDisplay.php.

References

20070504 Remote File Include In Script impex mailing-list
20060412 Remote File Inclusion in VBulletin ImpEx mailing-list
impex-systempath-file-include(34095) vdb-entry
19352 third-party-advisory
impex-multiple-file-inclusion(25789) vdb-entry
24692 vdb-entry
24691 vdb-entry
24690 vdb-entry