Unscored CVE-2006-7047 EUVD-2006-7029GHSA-m99j-42qj-56rq

include.php in Shoutpro 1.0 might allow remote attackers to bypass IP ban restrictions via a URL in the path parameter that points to an al…

Published Feb 24, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

include.php in Shoutpro 1.0 might allow remote attackers to bypass IP ban restrictions via a URL in the path parameter that points to an alternate bannedips.php file. NOTE: this issue was originally reported as remote file inclusion, but CVE analysis suggests that this cannot be used for code execution.

References

shoutpro-include-file-include(27111) vdb-entry
20060613 Re: Shoutpro 1.0 Version - Remote File Include Vulnerability mailing-list
2303 third-party-advisory
20060613 Shoutpro 1.0 Version - Remote File Include Vulnerability mailing-list