Unscored CVE-2006-6883 EUVD-2006-6866GHSA-q398-8gm5-q4rv

PHP remote file inclusion vulnerability in php4you.php in PHPIrc_bot 0.2 allows remote attackers to execute arbitrary PHP code via a URL in…

Published Jan 5, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

PHP remote file inclusion vulnerability in php4you.php in PHPIrc_bot 0.2 allows remote attackers to execute arbitrary PHP code via a URL in the dir parameter. NOTE: this issue is disputed by CVE, since the dir variable is declared before being used

References

20070104 CVE Dispute - PHPIrc_bot PHP file inclusion mailing-list
phpircbot-php4you-file-include(31185) vdb-entry
20061231 PHPIrc_bot <= Remote File Include mailing-list