Unscored CVE-2006-5280 EUVD-2006-5265GHSA-hq73-84wx-gjvc

PHP remote file inclusion vulnerability in includes/import-archive.php in Leicestershire communityPortals 1.0 build 20051018 and earlier al…

Published Oct 13, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in includes/import-archive.php in Leicestershire communityPortals 1.0 build 20051018 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the cp_root_path parameter.

References

ADV-2006-4010 vdb-entry
22381 third-party-advisory
community-portals-importarchive-file-include(29487) vdb-entry
20479 vdb-entry
29670 vdb-entry
2516 exploit