Vulnerability in Php Blog Cms

CVE-2006-6552

PHP remote file inclusion vulnerability in admin/plugins/NP_UserSharing.php in BLOG:CMS 4.1.3 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the DIR_ADMIN parameter.

EPSS: 0.034 (87.5th percentile) — read the EPSS interpretation.

Affected products

Php Blog_cms — versions 4.1.3
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_VUPEN)
cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
cve@mitre.org (exploit, x_refsource_EXPLOIT-DB)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_XF)