Vulnerability in Puntal

CVE-2006-6224

PHP remote file inclusion vulnerability in the installation scripts in Puntal before 1.8.5 allows remote attackers to execute arbitrary PHP code via the GLOBALS array.

EPSS: 0.014 (69.5th percentile) — read the EPSS interpretation.

Affected products

  • Puntal — versions 1.8.2, 1.8.3, 1.8.4
  • N/a — versions n/a

References