Unscored CVE-2006-5776 EUVD-2006-5760GHSA-pqpq-74m3-r29f

Multiple PHP remote file inclusions in Ariadne 2.4.1 allows remote attackers to execute arbitrary PHP code via the ariadne parameter in (1)…

Published Nov 7, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Multiple PHP remote file inclusions in Ariadne 2.4.1 allows remote attackers to execute arbitrary PHP code via the ariadne parameter in (1) ftp/loader.php and (2) lib/includes/loader.cmd.php. NOTE: this issue is disputed by CVE, since installation instructions recommend that the files be placed outside of the web document root and require the administrator to modify $ariadne in an include file

References

ariadne-storeconfig-file-include(30018) vdb-entry
20061106 RE: DISPUTE: PHP file inclusion in Ariadne 2.4.1 mailing-list
20916 vdb-entry
1827 third-party-advisory
20061106 Ariadne <= 2.4.1 Multiple Remote File Include Vulnerabilities(New) mailing-list
20061106 DISPUTE: PHP file inclusion in Ariadne 2.4.1 mailing-list