Vulnerability in Boonex Dolphin

CVE-2006-5410

PHP remote file inclusion vulnerability in templates/tmpl_dfl/scripts/index.php in BoonEx Dolphin 5.2 allows remote attackers to execute arbitrary PHP code via a URL in the dir[inc] parameter. NOTE: it is possible that this issue overlaps CVE-2006-4189.

EPSS: 0.015 (71.3th percentile) — read the EPSS interpretation.

Affected products

Boonex Dolphin — versions 5.2
N/a — versions n/a

References

cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_SREASON, third-party-advisory)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)