Unscored CVE-2006-6415 EUVD-2006-6398GHSA-5mpq-cjh3-mpwq

PHP remote file inclusion vulnerability in admin/lib-maintenance.inc.php in phpAdsNew 2.0.4-pr2 allows remote attackers to execute arbitrar…

Published Dec 10, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in admin/lib-maintenance.inc.php in phpAdsNew 2.0.4-pr2 allows remote attackers to execute arbitrary PHP code via a URL in the phpAds_path parameter, a different component than CVE-2006-3984. NOTE: this issue is disputed by CVE, since phpAds_path is used as a constant

References

phpadsnew-ibmaintenance-file-include(30774) vdb-entry
20061208 CVE dispute - phpAdsNew PHP file inclusion mailing-list
20061207 phpAdsNew-2.0.4-pr2 Remote File Inclusion Exploit mailing-list