Unscored CVE-2006-4557 EUVD-2006-4545GHSA-2pcr-jc7h-5447

PHP remote file inclusion vulnerability in plugins/plugins.php in Bob Jewell Discloser 0.0.4 allows remote attackers to execute arbitrary P…

Published Sep 6, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in plugins/plugins.php in Bob Jewell Discloser 0.0.4 allows remote attackers to execute arbitrary PHP code via a URL in the type parameter. NOTE: another researcher has stated that an attacker cannot control the type parameter. As of 20060901, CVE analysis concurs with the dispute

References

20060817 Re: discloser 0.0.4 Remote File Inclusion (with Exploit) mailing-list
20060816 discloser 0.0.4 Remote File Inclusion (with Exploit) mailing-list
20060817 Re: Re: discloser 0.0.4 Remote File Inclusion (with Exploit) mailing-list
20060819 Re: discloser 0.0.4 Remote File Inclusion (with Exploit) mailing-list