Unscored CVE-2006-5473 EUVD-2006-5458GHSA-9hmj-qj7f-xjvv

PHP remote file inclusion vulnerability in Description.php in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to e…

Published Oct 24, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in Description.php in Softerra PHP Developer Library 1.5.3 and earlier allows remote attackers to execute arbitrary PHP code via the lib_dir parameter. NOTE: this issue is disputed by CVE as of 20061023, since there is no Description.php file included in the product, and the existing "Description" file contains documentation, not functioning code

References

1763 third-party-advisory
20061024 PHP file inclusions in PHP Developer Library 1.5.3 (some disputed) mailing-list
20061023 PHP file inclusions in PHP Developer Library 1.5.3 (some disputed) mailing-list
20061020 PHPLibrary-1.5.3(Description.php) Remote File Include mailing-list