Vulnerability in Salims Softhouse Jaf Cms

CVE-2006-5131

module/shout/jafshout.php (aka the shoutbox) in ph03y3nk just another flat file (JAF) CMS 4.0 RC1 allows remote attackers to execute arbitrary code within sections bounded by "<?php" and "?>", possibly due to a static code injection vulnerability involving admin/data_inc.php.

EPSS: 0.025 (83.4th percentile) — read the EPSS interpretation.

Affected products

Salims_softhouse Jaf_cms — versions 4.0
N/a — versions n/a

References

cve@mitre.org (x_refsource_SREASON, third-party-advisory)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)