Unscored CVE-2006-3040 EUVD-2006-3037GHSA-rc3c-4c69-rjx6

PHP remote file inclusion vulnerability in talkbox.php in Amr Talkbox allows remote attackers to execute arbitrary PHP code via a URL in th…

Published Jun 15, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in talkbox.php in Amr Talkbox allows remote attackers to execute arbitrary PHP code via a URL in the direct parameter. NOTE: this issue has been disputed by CVE, since the $direct variable is set to a static value just before the include statement

References

20060613 Amr Talkbox talkbox.PHP - Remote File Include Vulnerabilities mailing-list
20060615 Re: Amr Talkbox talkbox.PHP - Remote File Include Vulnerabilities mailing-list
amr-talkbox-file-include(27122) vdb-entry
27455 vdb-entry
1105 third-party-advisory