Unscored CVE-2006-2872 EUVD-2006-2869GHSA-gjmr-vw7h-rm5v

PHP remote file inclusion vulnerability in config.php in Rumble 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the…

Published Jun 6, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in config.php in Rumble 1.02 allows remote attackers to execute arbitrary PHP code via a URL in the configArr[pathtodir] parameter.

References

rumble-config-file-include(26930) vdb-entry
20060605 # MHG Security Team ---Rumble 1.02 version Remote File Inc. mailing-list
20060604 # MHG Security Team ---Rumble 1.02 version Remote File Inc. mailing-list
1050 third-party-advisory
20060605 # MHG Security Team ---Rumble 1.02 version Remote File Inc. mailing-list