Unscored CVE-2006-5067 EUVD-2006-5052GHSA-7576-72m9-2cq9

PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit (PHPSaTK) allows remote attackers to execute arb…

Published Sep 28, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in loader.php in PHP System Administration Toolkit (PHPSaTK) allows remote attackers to execute arbitrary PHP code via a URL in the GLOBALS[config] parameter. NOTE: this issue is disputed by CVE; analysis shows that the GLOBALS[config] variable is initialized before being used

References

20060924 phpstak <= Remote File Include Vulnerability mailing-list
phpsatk-loader-file-include(29133) vdb-entry
20061108 phpsatk => Remote File Include Vulnerability EXploit mailing-list
20060926 PHPSaTK remote file inclusion - CVE dispute mailing-list
1647 third-party-advisory