Unscored CVE-2006-6217 EUVD-2006-6200GHSA-6fxp-47hx-rmfr

PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers to execute arbitrary…

Published Dec 1, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the module_name parameter.

References

mermaid-formdisp-file-include(30523) vdb-entry
20061124 PHP-Nuke Mermaid Module V1.2 (formdisp.php) Remote File Include Exploit mailing-list