Vulnerability in Albinator

CVE-2006-2182

Multiple PHP remote file inclusion vulnerabilities in (1) eday.php, (2) eshow.php, or (3) forgot.php in albinator 2.0.8 and earlier allow remote attackers to execute arbitrary PHP code via a URL in the Config_rootdir parameter.

EPSS: 0.076 (93.9th percentile) — read the EPSS interpretation.

Affected products

  • Albinator — versions 2.0.8
  • N/a — versions n/a

References